Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

wordpress wordpress 1.2.5 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2022-0993
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versio...
Siteground Siteground Security
7.5
CVSSv2
CVE-2022-0992
The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on initial 2FA set-up that allows unauthenticated and unauthorized users to configure 2FA f...
Siteground Security Optimizer
6.8
CVSSv2
CVE-2013-3491
Multiple cross-site request forgery (CSRF) vulnerabilities in the Sharebar plugin 1.2.5 for WordPress allow remote malicious users to hijack the authentication of administrators for requests that (1) add or (2) modify buttons, or (3) insert cross-site scripting (XSS) sequences.
Mdolon Sharebar 1.2.5
4.3
CVSSv2
CVE-2011-3852
Cross-site scripting (XSS) vulnerability in the EvoLve theme prior to 1.2.6 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Theme4press EvolveTheme4press Evolve 1.0Theme4press Evolve 1.0.0Theme4press Evolve 1.0.1Theme4press Evolve 1.0.2Theme4press Evolve 1.0.3Theme4press Evolve 1.0.4Theme4press Evolve 1.0.5Theme4press Evolve 1.0.6Theme4press Evolve 1.0.7Theme4press Evolve 1.0.8Theme4press Evolve 1.0.9Theme4press Evolve 1.1.0Theme4press Evolve 1.1.1Theme4press Evolve 1.1.2Theme4press Evolve 1.1.3Theme4press Evolve 1.1.4Theme4press Evolve 1.1.5Theme4press Evolve 1.1.6Theme4press Evolve 1.1.7Theme4press Evolve 1.1.8Theme4press Evolve 1.1.9
7.5
CVSSv2
CVE-2012-5469
The Portable phpMyAdmin plugin prior to 1.3.1 for WordPress allows remote malicious users to bypass authentication and obtain phpMyAdmin console access via a direct request to wp-content/plugins/portable-phpmyadmin/wp-pma-mod.
Phpmyadmin Phpmyadmin 1.2.7Phpmyadmin Phpmyadmin 1.2.6Phpmyadmin Phpmyadmin 1.2.5Phpmyadmin Phpmyadmin 1.2.4Phpmyadmin Phpmyadmin 1.0.1Phpmyadmin Phpmyadmin 1.0.0Phpmyadmin Phpmyadmin 1.3Phpmyadmin Phpmyadmin 1.2.9.5Phpmyadmin Phpmyadmin 1.2.9.4Phpmyadmin Phpmyadmin 1.2.9.3Phpmyadmin Phpmyadmin 1.1Phpmyadmin Phpmyadmin 1.0.8Phpmyadmin Phpmyadmin 1.0.7Phpmyadmin Phpmyadmin 1.0.6Phpmyadmin Phpmyadmin 1.2.9.1Phpmyadmin Phpmyadmin 1.2.8Phpmyadmin Phpmyadmin 1.2.3Phpmyadmin Phpmyadmin 1.2.1Phpmyadmin Phpmyadmin 1.0.5Phpmyadmin Phpmyadmin 1.0.3Phpmyadmin Phpmyadmin 1.2.9.2Phpmyadmin Phpmyadmin 1.2.9
5
CVSSv2
CVE-2015-4616
Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin prior to 1.2.5 for WordPress allows remote malicious users to create arbitrary files via a .. (dot dot) in the map_id parameter.
Easy2map Project Easy2map
7.5
CVSSv2
CVE-2015-4614
Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin prior to 1.2.5 for WordPress allow remote malicious users to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other uns...
Easy2map Project Easy2map
4.3
CVSSv2
CVE-2013-5918
Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin prior to 1.3.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Platinum Seo Project Platinum Seo Plugin 1.3.6Platinum Seo Project Platinum Seo Plugin 1.3.5Platinum Seo Project Platinum Seo Plugin 1.3.4Platinum Seo Project Platinum Seo Plugin 1.3.3Platinum Seo Project Platinum Seo Plugin 1.2Platinum Seo Project Platinum Seo Plugin 1.1Platinum Seo Project Platinum Seo Plugin 1.0Platinum Seo Project Platinum Seo Plugin 1.2.8Platinum Seo Project Platinum Seo Plugin 1.2.7Platinum Seo Project Platinum Seo Plugin 1.2.6Platinum Seo Project Platinum Seo Plugin 1.2.5Platinum Seo Project Platinum Seo PluginPlatinum Seo Project Platinum Seo Plugin 1.3.2Platinum Seo Project Platinum Seo Plugin 1.3Platinum Seo Project Platinum Seo Plugin 1.2.3Platinum Seo Project Platinum Seo Plugin 1.2.1Platinum Seo Project Platinum Seo Plugin 1.3.1Platinum Seo Project Platinum Seo Plugin 1.2.9Platinum Seo Project Platinum Seo Plugin 1.2.4Platinum Seo Project Platinum Seo Plugin 1.2.2
4.3
CVSSv2
CVE-2011-4568
Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin prior to 1.2.12 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the URI.
Foliovision Fv Wordpress Flowplayer Plugin 1.2.10Foliovision Fv Wordpress Flowplayer Plugin 1.2.3Foliovision Fv Wordpress Flowplayer Plugin 1.2.1Foliovision Fv Wordpress Flowplayer Plugin 1.0.4Foliovision Fv Wordpress Flowplayer Plugin 1.0.2Foliovision Fv Wordpress Flowplayer Plugin 0.9.13Foliovision Fv Wordpress Flowplayer Plugin 1.2.0Foliovision Fv Wordpress Flowplayer Plugin 1.1.0Foliovision Fv Wordpress Flowplayer Plugin 1.0.6Foliovision Fv Wordpress Flowplayer Plugin 1.0.5Foliovision Fv Wordpress Flowplayer Plugin 1.2.8Foliovision Fv Wordpress Flowplayer Plugin 1.2.7Foliovision Fv Wordpress Flowplayer Plugin 1.2.6Foliovision Fv Wordpress Flowplayer Plugin 1.2.5Foliovision Fv Wordpress Flowplayer Plugin 1.0Foliovision Fv Wordpress Flowplayer Plugin 0.9.18Foliovision Fv Wordpress Flowplayer Plugin 0.9.16Foliovision Fv Wordpress Flowplayer Plugin 0.9.15Foliovision Fv Wordpress Flowplayer PluginFoliovision Fv Wordpress Flowplayer Plugin 1.2.9Foliovision Fv Wordpress Flowplayer Plugin 1.2.4Foliovision Fv Wordpress Flowplayer Plugin 1.2.2
4.3
CVSSv2
CVE-2017-18575
The newstatpress plugin prior to 1.2.5 for WordPress has multiple stored XSS issues.
Newstatpress Project Newstatpress
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook