WordPress WP Data Access plugin versions 5.3.7 and below suffer from a privilege escalation vulnerability.
d49ea8b9bea193cf8a0f42cd8b8716664bb3a87bf5134d20480629da298be9ea
WordPress WPGateway plugin versions 3.5 and below suffer from an unauthenticated privilege escalation vulnerability.
715990b9ee833ca498f918bbbc57126f80aebb00320ec587bbd2652d95d95513
WordPress Download Manager plugin versions 3.2.50 and below suffer from an arbitrary file deletion vulnerability.
81394c472063bd99c8767e0198e8bc71d4dc98bfdea27535691be0ffd873ac59
WordPress SiteGround Security plugin versions 1.2.5 and below suffer from an authentication bypass vulnerability as well as an authorization weakness in versions 1.2.4 and below.
39002aacdb45a842886c5499bb9ff463ad56fdba64a4bbe185d1961315404f6b
WordPress Photoswipe Masonry Gallery plugin version 1.2.14 suffers from a persistent cross site scripting vulnerability.
15996cc31605f93925a67eef5bab187429b2569dcdbb41553596502d78575f90
WordPress Cozmoslabs Profile Builder plugin versions 3.6.1 and below suffer from a cross site scripting vulnerability.
227d0cbc687a81308dae38c43331e51ea397ccd24a1a3764724ddc45172f1143
WordPress Email Template Designer – WP HTML Mail plugin versions 3.0.9 and below suffer from a cross site scripting vulnerability.
2daac954d0f1c688550129f35862a338821ee9c20becb99aa75ebc8c3fabb72e
WordPress Preview E-mails for WooCommerce plugin versions 1.6.8 and below suffer from a cross site scripting vulnerability.
01bd24243549cbbdb29bc5e55a2d15d7d611dfff811a5a470702cdad4370055b
This Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin versions from 7.0.0 through 7.0.4. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable server.
fab2eeb88db6a1f9b11eed6c490a6ca021dd6f8237a47b405d41bd041a36af45
WordPress wpDiscuz plugin version 7.0.4 remote shell upload exploit.
8fa69935470b723c80f2977560b14f53d9cb4f4b6055bb73e01b783fd7f62aad
This Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin version 7.0.4. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable server.
187052df5b77471af6ad467ad2dc057df0f9c9a641dd2c9d116e4f60896dcc30