Jul 9, 2020 | WordPress Vulnerabilities, WordPress, Web Design
One of the best things about WordPress is the cascade of available themes. Finding an excellent theme can be fantastic. One of the downsides: when support lapses or standards change and your site is left high and dry. What’s a theme that you loved that is now...
Jan 22, 2020 | WordPress Vulnerabilities
DescriptionContact Form Clean and Simple is vulnerable to Authenticated stored XSS. When a user has admin capabilities, malicious code can be submitted through the plugin’s options. This code will then be executed on every page with the contact form on the...
Jan 27, 2020 | WordPress Vulnerabilities
DescriptionMultiple vulnerabilities was discovered in the «CarSpot – Dealership WordPress Classified Theme», tested version — v2.2.0: – Authenticated Persistent XSS -> Registration Form/User Profile – Authenticated Persistent XSS -> Ad Post –...
Jan 19, 2020 | WordPress Vulnerabilities
Proof of Concept Vulnerable code is from like 68 to 84. The code gets the value of option `bm_row_amount` from database and matches it with the GET request `row_amount`. If they do not match then it updates the option `bm_row_amount` with the provided GET value. If...
Jan 15, 2020 | WordPress Vulnerabilities
DescriptionMultiple vulnerabilities was discovered in the «Real Estate 7 WordPress», tested version — v2.9.4: – Unauthenticated Reflected XSS – Authenticated Persistent XSS – Authenticated Persistent Self-XSS – IDOR – Information Exposure...
Jan 18, 2020 | WordPress Vulnerabilities
<html> <form action=”https://[WP]/wp-admin/admin.php?page=marketo_fat” method=”POST” id=”csrf”> <input type=”text” name=”marketo_save” value=”true”> <input...
