Multiple WordPress themes by RocketTheme suffer from cross site scripting, path disclosure, and content spoofing vulnerabilities.
b64d5ae444d8cc1bf39555f4b065ea716c63e9ea02efe5949842af75d06a8ff8
Multiple WordPress themes suffer from an arbitrary file download vulnerability in download.php. These include Ultimatum, Medicate, Centum, Avada, Striking Theme & E-Commerce, cuckootap, IncredibleWP, Ultimatum, Medicate, Centum, Avada, Trinity, Lote27, and Revslider themes.
79c86b5eac6b7d9b26307fbc9f51aeb8f4fae1522a59b66fb561d7f899630c1f
Multiple WordPress themes suffer from arbitrary file download and file deletion vulnerabilities. Included are Awake, Construct, Dejavu, Echelon, Elegance, Fusion, Infocus, Mega, Method, Modular, MyRiad, Oakrealty, Persuasion, and Binary.
16d3d8d513a0c1a112e5fd02b8f6fb4f3ac05578ecf115db498705d6dbb8c3ef
Rokbox version 2.13 for WordPress suffers from content spoofing, cross site scripting, denial of service, path disclosure, and various other vulnerabilities.
51a81a8d051d242f2a2efc2c318db1e018963bd4d73085533099aba88545bf32
Multiple WordPress plugins suffer from a remote shell upload vulnerability due to the reuse of the vulnerable timthumb.php library.
321c3ad06b0f47075ec9eb1b1882d1392ead87ce0674e1dbfd83a2020fa2909d
Multiple WordPress themes suffer from cross site scripting and information disclosure vulnerabilities. Themes affected include Live Wire (all three themes from Live Wire series), Gotham News, Typebased, Blogtheme, VibrantCMS, Fresh News, The Gazette Edition, NewsPress, The Station, The Original Premium News, Flash News, Busy Bee, and Geometric.
1a955659244778d9058139f1fa6493227ce6506d22be3379a1d102a1fa381170