exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New
Showing 1 - 11 of 11 RSS Feed

Files from Chloe Chamberland

First Active2021-01-08
Last Active2023-04-12
WordPress WP Data Access 5.3.7 Privilege Escalation
Posted Apr 12, 2023
Authored by Chloe Chamberland | Site wordfence.com

WordPress WP Data Access plugin versions 5.3.7 and below suffer from a privilege escalation vulnerability.

tags | exploit
advisories | CVE-2023-1874
SHA-256 | d49ea8b9bea193cf8a0f42cd8b8716664bb3a87bf5134d20480629da298be9ea
WordPress WPGateway 3.5 Privilege Escalation
Posted Sep 14, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress WPGateway plugin versions 3.5 and below suffer from an unauthenticated privilege escalation vulnerability.

tags | exploit
advisories | CVE-2022-3180
SHA-256 | 715990b9ee833ca498f918bbbc57126f80aebb00320ec587bbd2652d95d95513
WordPress Download Manager 3.2.50 Arbitrary File Deletion
Posted Aug 4, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress Download Manager plugin versions 3.2.50 and below suffer from an arbitrary file deletion vulnerability.

tags | exploit, arbitrary
advisories | CVE-2022-2431
SHA-256 | 81394c472063bd99c8767e0198e8bc71d4dc98bfdea27535691be0ffd873ac59
WordPress SiteGround Security 1.2.5 Authentication Bypass
Posted Apr 8, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress SiteGround Security plugin versions 1.2.5 and below suffer from an authentication bypass vulnerability as well as an authorization weakness in versions 1.2.4 and below.

tags | exploit, bypass
advisories | CVE-2022-0992, CVE-2022-0993
SHA-256 | 39002aacdb45a842886c5499bb9ff463ad56fdba64a4bbe185d1961315404f6b
WordPress Photoswipe Masonry Gallery 1.2.14 Cross Site Scripting
Posted Feb 25, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress Photoswipe Masonry Gallery plugin version 1.2.14 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2022-0750
SHA-256 | 15996cc31605f93925a67eef5bab187429b2569dcdbb41553596502d78575f90
WordPress Cozmoslabs Profile Builder 3.6.1 Cross Site Scripting
Posted Feb 17, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress Cozmoslabs Profile Builder plugin versions 3.6.1 and below suffer from a cross site scripting vulnerability.

tags | advisory, xss
advisories | CVE-2022-0653
SHA-256 | 227d0cbc687a81308dae38c43331e51ea397ccd24a1a3764724ddc45172f1143
WordPress Email Template Designer – WP HTML Mail 3.0.9 Cross Site Scripting
Posted Jan 19, 2022
Authored by Chloe Chamberland | Site wordfence.com

WordPress Email Template Designer – WP HTML Mail plugin versions 3.0.9 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2022-0218
SHA-256 | 2daac954d0f1c688550129f35862a338821ee9c20becb99aa75ebc8c3fabb72e
WordPress Preview E-mails For WooCommerce 1.6.8 Cross Site Scripting
Posted Nov 18, 2021
Authored by Chloe Chamberland | Site wordfence.com

WordPress Preview E-mails for WooCommerce plugin versions 1.6.8 and below suffer from a cross site scripting vulnerability.

tags | advisory, xss
advisories | CVE-2021-42363
SHA-256 | 01bd24243549cbbdb29bc5e55a2d15d7d611dfff811a5a470702cdad4370055b
WordPress wpDiscuz 7.0.4 Shell Upload
Posted Jun 28, 2021
Authored by Hoa Nguyen, Chloe Chamberland | Site metasploit.com

This Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin versions from 7.0.0 through 7.0.4. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable server.

tags | exploit, remote, arbitrary, php, code execution, file upload
advisories | CVE-2020-24186
SHA-256 | fab2eeb88db6a1f9b11eed6c490a6ca021dd6f8237a47b405d41bd041a36af45
WordPress wpDiscuz 7.0.4 Shell Upload
Posted Jun 6, 2021
Authored by Chloe Chamberland, Juampa Rodriguez

WordPress wpDiscuz plugin version 7.0.4 remote shell upload exploit.

tags | exploit, remote, shell
advisories | CVE-2020-24186
SHA-256 | 8fa69935470b723c80f2977560b14f53d9cb4f4b6055bb73e01b783fd7f62aad
WordPress wpDiscuz 7.0.4 Shell Upload
Posted Jan 8, 2021
Authored by Hoa Nguyen, Chloe Chamberland | Site metasploit.com

This Metasploit module exploits an arbitrary file upload in the WordPress wpDiscuz plugin version 7.0.4. This flaw gave unauthenticated attackers the ability to upload arbitrary files, including PHP files, and achieve remote code execution on a vulnerable server.

tags | exploit, remote, arbitrary, php, code execution, file upload
SHA-256 | 187052df5b77471af6ad467ad2dc057df0f9c9a641dd2c9d116e4f60896dcc30
Page 1 of 1
Back1Next

File Archive:

June 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    18 Files
  • 2
    Jun 2nd
    13 Files
  • 3
    Jun 3rd
    0 Files
  • 4
    Jun 4th
    0 Files
  • 5
    Jun 5th
    32 Files
  • 6
    Jun 6th
    39 Files
  • 7
    Jun 7th
    22 Files
  • 8
    Jun 8th
    0 Files
  • 9
    Jun 9th
    0 Files
  • 10
    Jun 10th
    0 Files
  • 11
    Jun 11th
    0 Files
  • 12
    Jun 12th
    0 Files
  • 13
    Jun 13th
    0 Files
  • 14
    Jun 14th
    0 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close