Vulnerability database

3,863 results · page 78 of 78

• Jul 2, 2018WP Live Chat Support Pro plugin before 8.0.07: Unauthenticated Remote Code ExecutionCVE-2018-12426 · WordPress plugins & themes · reported by MITRECritical 9.8

  The WP Live Chat Support Pro plugin before 8.0.07 for WordPress is vulnerable to unauthenticated Remote Code Execution due to client-side validation of allowed file types, as demonstrated by a v1/remote_upload request with a .php filename and the image/jpeg content type.

  Product

  WP Live Chat Support Pro plugin before 8.0.07

  Fixed in

  8.0.07

  What to do

  Update WP Live Chat Support Pro plugin before 8.0.07 to 8.0.07 or newer.

  Full record and what to do →NVD recordgithub.comgithub.com

• Jun 4, 2018wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site ScriptinCVE-2018-11709 · WordPress plugins & themes · reported by MITREMedium 6.1

  wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

  Product

  wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum

  Fixed in

  1.4.12

  What to do

  Update wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum to 1.4.12 or newer.

  Full record and what to do →NVD recordblog.dewhurstsecurity.comwordpress.org

• May 30, 2018class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change VulnerCVE-2018-11579 · WordPress plugins & themes · reported by MITREMedium 5.3

  class-woo-banner-management.php in the MULTIDOTS WooCommerce Category Banner Management plugin 1.1.0 for WordPress has an Unauthenticated Settings Change Vulnerability, related to certain wp_ajax_nopriv_ usage. Anyone can change the plugin's setting by simply sending a request with a wbm_save_shop_page_banner_data action.

  Product

  MULTIDOTS WooCommerce Category Banner Management

  Affected

  1.1.0 to 1.1.0

  What to do

  Affects 1.1.0 to 1.1.0. Update MULTIDOTS WooCommerce Category Banner Management to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordlabs.threatpress.comwordpress.org

• May 28, 2018Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL databaCVE-2018-11309 · WordPress plugins & themes · reported by MITRECritical 9.8

  Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated attacker to dump the WordPress MySQL database via an applyCoupon action in an admin-ajax.php request.

  Product

  MemberMouse

  Fixed in

  2.2.8

  What to do

  Update MemberMouse to 2.2.8 or newer.

  Full record and what to do →NVD recordblog.riccardoancarani.itblog.riccardoancarani.it

• May 22, 2018init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled.CVE-2018-11366 · WordPress plugins & themes · reported by MITREMedium 6.1

  init.php in the Loginizer plugin 1.3.8 through 1.3.9 for WordPress has Unauthenticated Stored Cross-Site Scripting (XSS) because logging is mishandled. This is fixed in 1.4.0.

  Product

  init.php in the Loginizer plugin 1.3.8

  Affected

  up to 1.3.9

  Fixed in

  1.4.0

  What to do

  Update init.php in the Loginizer plugin 1.3.8 to 1.4.0 or newer.

  Full record and what to do →NVD recordblog.dewhurstsecurity.complugins.trac.wordpress.org

• Feb 6, 2018In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (fromCVE-2018-6389 · WordPress plugins & themes · reported by MITREHigh 7.5

  In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

  Affected

  up to 4.9.2

  What to do

  Affects up to 4.9.2. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurityfocus.comsecuritytracker.com

• Jan 1, 2018SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in CVE-2018-3811 · WordPress plugins & themes · reported by MITRECritical 9.8

  SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords() function in smartgooglecode.php did not use prepared statements and did not sanitize the $_POST["oId"] variable before passing it as input into the SQL query.

  Product

  SQL Injection vulnerability in the Oturia Smart Google Code Inserter

  Fixed in

  3.5

  What to do

  Update SQL Injection vulnerability in the Oturia Smart Google Code Inserter to 3.5 or newer.

  Full record and what to do →NVD recordlimbenjamin.comwordpress.org

• Jan 1, 2018Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrarCVE-2018-3810 · WordPress plugins & themes · reported by MITRECritical 9.8

  Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code.

  Product

  Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter

  Fixed in

  3.5

  What to do

  Update Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter to 3.5 or newer.

  Full record and what to do →NVD recordlimbenjamin.comwordpress.org

• Nov 16, 2017CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the pluginCVE-2017-1000224 · WordPress plugins & themes · reported by MITREMedium 6.5

  CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin

  Affected

  up to 11.8.1

  What to do

  Affects up to 11.8.1. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurity.dxw.comsecurity.dxw.com

• Oct 6, 2016Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress pluginCVE-2016-1000112 · WordPress plugins & themes · reported by MITRECritical 9.1

  Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin

  Affected

  1.0 to 1.0

  What to do

  Affects 1.0 to 1.0. Update the plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.

  Full record and what to do →NVD recordsecurityfocus.comvapidlabs.com

• Aug 10, 2011WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vecCVE-2011-3128 · WordPress plugins & themes · reported by MITREMedium 5

  WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.

  Fixed in

  3.1.3

  What to do

  Update the plugin to 3.1.3 or newer.

  Full record and what to do →NVD recordcore.trac.wordpress.orgsecunia.com

• Aug 18, 2009Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct requeCVE-2009-2854 · WordPress plugins & themes · reported by MITREMedium 6.4

  Wordpress before 2.8.3 does not check capabilities for certain actions, which allows remote attackers to make unauthorized edits or additions via a direct request to (1) edit-comments.php, (2) edit-pages.php, (3) edit.php, (4) edit-category-form.php, (5) edit-link-category-form.php, (6) edit-tag-form.php, (7) export.php, (8) import.php, or (9) link-add.php in wp-admin/.

  Fixed in

  2.8.3

  What to do

  Update the plugin to 2.8.3 or newer.

  Full record and what to do →NVD recordcore.trac.wordpress.orgcore.trac.wordpress.org

• Mar 18, 2006Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unCVE-2006-1263 · WordPress plugins & themes · reported by MITREMedium 4.3

  Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

  Fixed in

  2.0.2

  What to do

  Update the plugin to 2.0.2 or newer.

  Full record and what to do →NVD recordwordpress.orgsecurityfocus.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.