CVE Vulnerability Catalog

The WP Restaurant Listings plugin for WordPress up to version 1.0.2 is vulnerable to Stored Cross-Site Scripting via the 'align' parameter of the restaurant_summary shortcode. The plugin fails to properly sanitize input and escape output, allowing authenticated attackers with contributor-level access or higher to inject arbitrary web scripts.

The Oboxmedia Ads plugin for WordPress (all versions up to and including 1.9.8) is vulnerable to Stored Cross-Site Scripting via the 'before_widget' and 'after_widget' parameters of the oboxads-ad-widget shortcode. This is due to insufficient input sanitization and output escaping.

The Playerzbr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'urlmeta' post meta field in all versions up to and including 1.6. This is due to insufficient input sanitization and output escaping. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Cinza Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cgrid_skin_content' post meta field in all versions up to and including 1.2.1 due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level access or above can inject arbitrary web scripts that execute whenever a user accesses the injected page.

The WP-Thumbnail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'roboshot' shortcode in all versions up to and including 1.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The WP Responsive Meet The Team plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wprm_team' shortcode in all versions up to and including 1.0.1. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Simple Tableau Viz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tableau' shortcode in all versions up to and including 2.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Responsive iframe GoogleMap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive_map' shortcode in all versions up to and including 1.0.2. This is due to insufficient input sanitization and output escaping on the 'width' and 'height' attributes. This allows authenticated attackers with contributor-level access or above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Simple Youtube Shortcode plugin for WordPress up to version 1.1.3 is vulnerable to Stored Cross-Site Scripting via the 'embed_youtube' shortcode. Insufficient input sanitization and output escaping on the 'id' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Print Button Shortcode plugin for WordPress up to version 1.0.1 is vulnerable to Stored Cross-Site Scripting via the 'print-button' shortcode. Insufficient input sanitization and output escaping on the 'target' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The WP-Force Images Download plugin for WordPress up to version 1.8 is vulnerable to Stored Cross-Site Scripting via the 'wpfid' shortcode. Insufficient input sanitization and output escaping on the 'class' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The Mixlr Shortcode plugin for WordPress up to version 1.0.1 is vulnerable to Stored Cross-Site Scripting via the 'mixlr' shortcode. Insufficient input sanitization and output escaping on the 'url' attribute allows authenticated attackers with contributor-level access and above to inject arbitrary web scripts that execute when a user accesses an injected page.

The JB News Ticker plugin for WordPress (all versions up to and including 1.0) is vulnerable to stored cross-site scripting (XSS) via the 'id' shortcode attribute of the 'jbticker' shortcode. This is due to insufficient input sanitization and output escaping. An authenticated attacker with contributor-level access or higher can inject arbitrary scripts into pages.

The This-or-That plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'thisorthat' shortcode in versions up to and including 1.0.4. The vulnerability is due to insufficient input sanitization and output escaping on user-supplied attributes. This allows authenticated attackers with contributor-level access or higher to inject arbitrary web scripts that execute when a user accesses an injected page.

The Email Tracker plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.3.15 due to insufficient escaping and lack of preparation on the SQL query. This allows authenticated attackers with Administrator-level access and above to append additional SQL queries to extract sensitive information from the database.

Nieautoryzowany zdalny atakujący może spowodować awarię procesu wscserver, wysyłając niekompletne żądania SOAP. Proces wscserver nie zostanie ponownie uruchomiony przez mechanizm watchdog, co wymaga ponownego uruchomienia urządzenia, aby przywrócić jego działanie.

Metoda SOAP importFile jest podatna na atak typu traversal katalogu. Nieautoryzowany zdalny atakujący może obejść ograniczenia ścieżki i przesyłać pliki do dowolnych lokalizacji.

Serwer wsc używa wbudowanego certyfikatu do weryfikacji autentyczności wiadomości SOAP. Zdalny atakujący bez uwierzytelnienia może wyodrębnić klucze prywatne z oprogramowania dotkniętych urządzeń.

Atakujący z niskimi uprawnieniami zdalnie może uszkodzić pamięć masową użytkowników serwera WWW na urządzeniu, ustawiając sekwencję nieobsługiwanych znaków. To prowadzi do usunięcia wszystkich wcześniej skonfigurowanych użytkowników oraz utworzenia domyślnego konta Administratora z znanym domyślnym hasłem.

The Simple Banner plugin for WordPress up to version 3.0.10 is vulnerable to Stored Cross-Site Scripting via the 'pro_version_activation_code' parameter. The plugin fails to properly sanitize input and escape output, allowing authenticated attackers with administrator-level access to inject arbitrary web scripts. This only affects multi-site installations and installations where unfiltered_html has been disabled.