wordpress wordpress 1.1.1 vulnerabilities and exploits

(subscribe to this query)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ConvertCalculator ConvertCalculator for WordPress allows Stored XSS.This issue affects ConvertCalculator for WordPress: from n/a up to and including 1.1.1.

Convertcalculator Convertcalculator For Wordpress

Cross-site scripting (XSS) vulnerability in the WP-Cron Dashboard plugin 1.1.5 and previous versions for WordPress allows remote malicious users to inject arbitrary web script or HTML via the procname parameter to wp-admin/tools.php.

Wokamoto Wp-cron Dashboard Wokamoto Wp-cron Dashboard 1.1.0 Wokamoto Wp-cron Dashboard 1.1.1 Wokamoto Wp-cron Dashboard 1.1.2 Wokamoto Wp-cron Dashboard 1.1.3 Wokamoto Wp-cron Dashboard 1.1.4

Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress prior to 1.1.6 prior to 2011-12-31 allows remote malicious users to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter.

Thecartpress Thecartpress Thecartpress Thecartpress 1.0 Thecartpress Thecartpress 1.0.1 Thecartpress Thecartpress 1.0.2 Thecartpress Thecartpress 1.0.3 Thecartpress Thecartpress 1.0.4 Thecartpress Thecartpress 1.0.5 Thecartpress Thecartpress 1.0.6 Thecartpress Thecartpress 1.0.7 Thecartpress Thecartpress 1.0.8 Thecartpress Thecartpress 1.0.9 Thecartpress Thecartpress 1.1.0

1 EDB exploit

An issue exists in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php.

Weblizar Pinterest-feeds 1.1.1

An issue exists in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter.

Weblizar Pinterest-feeds 1.1.1

An issue exists in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREE_Access_Token parameter.

Weblizar Pinterest-feeds 1.1.1

An issue exists in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizar_pffree_settings_save_get-users parameter.

Weblizar Pinterest-feeds 1.1.1

A Local File Inclusion vulnerability in the Site Editor plugin up to and including 1.1.1 for WordPress allows remote malicious users to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path tra...

Siteeditor Site Editor

1 EDB exploit3 Github repositories

Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote malicious users to inject arbitrary web script or HTML via the (1) bulk parameter to media-library-categories/add.php or (2) q parameter to media-library-ca...

Rick Mead Media Library Categories 1.1.1

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Wow New Media Wow Moodboard Lite 1.1.1

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook