wordpress wordpress 3.1.4 vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the Atahualpa theme prior to 3.6.8 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.

Bytesforall Atahualpa Bytesforall Atahualpa 2.0 Bytesforall Atahualpa 2.01 Bytesforall Atahualpa 2.2 Bytesforall Atahualpa 2.21 Bytesforall Atahualpa 3.1 Bytesforall Atahualpa 3.1.1 Bytesforall Atahualpa 3.1.2 Bytesforall Atahualpa 3.1.3 Bytesforall Atahualpa 3.1.4 Bytesforall Atahualpa 3.1.5 Bytesforall Atahualpa 3.1.6

1 EDB exploit

SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.

Kolja Schleich Leaguemanager Kolja Schleich Leaguemanager 1.0 Kolja Schleich Leaguemanager 1.1 Kolja Schleich Leaguemanager 1.2 Kolja Schleich Leaguemanager 1.2.1 Kolja Schleich Leaguemanager 1.2.2 Kolja Schleich Leaguemanager 1.3 Kolja Schleich Leaguemanager 1.4 Kolja Schleich Leaguemanager 1.4.1 Kolja Schleich Leaguemanager 1.4.2 Kolja Schleich Leaguemanager 1.5 Kolja Schleich Leaguemanager 2.0

1 EDB exploit1 Github repository

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...

Blair Williams Pretty Link Lite Blair Williams Pretty Link Lite 1.6.0 Blair Williams Pretty Link Lite 1.6.1 Joobi Com Jnews 8.0.1 Civicrm Civicrm 3.1.0 Civicrm Civicrm 3.1.1 Civicrm Civicrm 3.1.2 Civicrm Civicrm 3.1.3 Civicrm Civicrm 3.1.4 Civicrm Civicrm 3.1.5 Civicrm Civicrm 3.1.6 Civicrm Civicrm 3.2.0

1 EDB exploit

Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin prior to 3.1.4 for WordPress allows remote malicious users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to t...

Reflex Gallery Project Reflex Gallery

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin prior to 4.0.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-admin/options-general.php.

Tweet-blender Tweet-blender Tweet-blender Tweet-blender 2.0.0 Tweet-blender Tweet-blender 2.0.1 Tweet-blender Tweet-blender 2.0.2 Tweet-blender Tweet-blender 2.0.3 Tweet-blender Tweet-blender 2.0.4 Tweet-blender Tweet-blender 2.0.5 Tweet-blender Tweet-blender 2.1.0 Tweet-blender Tweet-blender 2.1.1 Tweet-blender Tweet-blender 2.2.0 Tweet-blender Tweet-blender 2.2.1 Tweet-blender Tweet-blender 2.2.2

Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin prior to 3.3.0 for WordPress allows remote malicious users to inject arbitrary JavaScript via the yr parameter.

Sunnythemes Spiffy Calendar 1.0.0 Sunnythemes Spiffy Calendar 1.0.1 Sunnythemes Spiffy Calendar 1.0.2a Sunnythemes Spiffy Calendar 1.0.3 Sunnythemes Spiffy Calendar 1.1.0 Sunnythemes Spiffy Calendar 1.1.1 Sunnythemes Spiffy Calendar 1.1.2 Sunnythemes Spiffy Calendar 1.1.3 Sunnythemes Spiffy Calendar 1.1.4 Sunnythemes Spiffy Calendar 1.1.5 Sunnythemes Spiffy Calendar 1.1.6 Sunnythemes Spiffy Calendar 1.1.7

Akeeba Restore (restore.php), as used in Joomla! 2.5.4 up to and including 2.5.25, 3.x up to and including 3.2.5, and 3.3.0 up to and including 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 up to and including 4.0.2; Backup Professional for WordPress 1.0.b1 up to and includ...

Joomla Joomla! 2.5.4 Joomla Joomla! 2.5.5 Joomla Joomla! 2.5.6 Joomla Joomla! 2.5.7 Joomla Joomla! 2.5.8 Joomla Joomla! 2.5.9 Joomla Joomla! 2.5.10 Joomla Joomla! 2.5.11 Joomla Joomla! 2.5.12 Joomla Joomla! 2.5.13 Joomla Joomla! 2.5.14 Joomla Joomla! 2.5.15

1 EDB exploit

The responsive-menu plugin prior to 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.

Expresstech Responsive Menu

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.This issue affects Adifier - Classified Ads WordPress Theme: from n/a prior to 3.1.4.

Spoonthemes Adifier

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifier - Classified Ads WordPress Theme allows Reflected XSS.This issue affects Adifier - Classified Ads WordPress Theme: from n/a prior to 3.1.4.

Spoonthemes Adifier

« PREV 1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook