VulnCrest
Search
Create account
Report an incident
Radar sectionsDatabase
Check my site

CWE-434Vulnerability type

WordPress Arbitrary File Upload vulnerabilities (page 1313)

Upload handlers that accept PHP files, the shortest route from a plugin bug to a webshell.

Severity
Signals
Software

41,175 results

The VulnCrest analysis badge marks vulnerabilities we reproduced in our lab, with proof of execution.

WordPress Arbitrary File Upload vulnerabilities (page 1313)
SeverityVulnerabilityCVEInstallsPublished
Medium6.1Cross-Site Scripting
User Role by BestWebSoft – Add and Customize Roles and Capabilities in WordPress≤1.5.5Update to 1.5.6
CVE-2017-18566—
Medium6.1Reflected Cross-Site Scripting
Maps by BestWebSoft≤1.3.5Update to 1.3.6
CVE-2017-18557—
Medium6.1Multiple Cross-Site Scripting
AdPush≤1.43Update to 1.44
CVE-2017-18487—
Medium6.1Reflected Cross-Site Scripting
Custom Search by BestWebSoft – WordPress Custom Search Plugin≤1.35Update to 1.36
CVE-2017-18494—
Medium6.1Multiple Cross-Site Scripting
Subscriber by BestWebSoft≤1.3.4Update to 1.3.5
CVE-2017-18502—
Medium6.1Reflected Cross-Site Scripting
Custom Admin Page by BestWebSoft – Configurable WordPress Dashboard Pages Plugin≤0.1.1Update to 0.1.2
CVE-2017-18493—
Medium6.1Reflected Cross-Site Scripting
Updater by BestWebSoft≤1.34Update to 1.35
CVE-2017-18565—
Medium6.1Reflected Cross-Site Scripting
Contact Form Multi by BestWebSoft – Multiple Forms Plugin for Single WordPress Website<1.2.1Update to 1.2.1
CVE-2017-18490—
Medium6.1Reflected Cross-Site Scripting
Visitors Online by BestWebSoft<1.0.0Update to 1.0.0
CVE-2017-18537—
Medium6.1Multiple Cross-Site Scripting
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress≤1.5.6Update to 1.5.7
CVE-2017-18492—
Medium6.1ReflectedCross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<3.96Update to 3.96
CVE-2015-9295—
Medium6.1Reflected Cross-Site Scripting
BestWebSoft’s Pinterest≤1.0.4Update to 1.0.5
CVE-2017-18517—
Medium6.1Reflected Cross-Site Scripting
Testimonials by BestWebSoft≤0.1.8Update to 0.1.9
CVE-2017-18558—
Medium6.1Reflected Cross-Site Scripting
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress<4.0.6Update to 4.0.6
CVE-2017-18491—
Medium6.1Cross-Site Scripting
Help Center by BestWebSoft≤1.0.4Update to 1.0.5
CVE-2017-18542—
Medium6.1 Multiple Cross-Site Scripting
Analytics by BestWebSoft – Google Analytics Dashboard and Statistic Plugin for WordPress≤1.7.0Update to 1.7.1
CVE-2017-18556—
Critical9.8SQL Injection
SpiderCalendar≤1.5.51Update to 1.5.52
CVE-2017-7719—
Medium6.1Reflected Cross-Site Scripting
Slideshow Gallery LITE≤1.6.5Update to 1.6.6
CVE-2018-17946—
High8.8Cross-Site Request Forgery
WHIZZ≤1.1Update to 1.1.1
CVE-2017-8099—
Medium6.5Cross-Site Request Forgery
CopySafe Web Protection – Copy Protect Images<2.6Update to 2.6
CVE-2017-8100—
Medium6.1Cross-Site Scripting
Twitter Cards Meta – Best Twitter Card Plugin for WordPress<2.5.0Update to 2.5.0
CVE-2017-18503—
High8.8Cross-Site Request Forgery
Twitter Cards Meta – Best Twitter Card Plugin for WordPress≤2.4.5Update to 2.5.0
CVE-2017-18504—
Medium6.1All In One Schema Rich Snippets <= 1.4.4 - Cross-Site Scripting
Schema – All In One Schema Rich Snippets<1.5.0Update to 1.5.0
CVE-2018-20977—
Critical9.8SQL Injection via gallery_name
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002014—
Medium5.4Stored Cross-Site Scripting
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002011—
Critical9.8SQL Injection via gid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002012—
Critical9.8Blind SQL Injection via imgid
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002013—
Critical9.8SQL Injection via selectMulGallery
Image Gallery with Slideshow Plugin≤1.5.2No patch available
CVE-2017-1002015—
High8.2Open Proxy
filedownload≤1.4Update to 2.0
CVE-2015-1000002—
Medium6.1Reflected Cross-Site Scripting
YOP Poll<5.8.1Update to 5.8.1
CVE-2017-2127—

Search VulnCrest Radar

Jump to

Are you sure?