Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

wordpress wordpress 3.3.1 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2013-2705

Cross-site request forgery (CSRF) vulnerability in the WordPress Simple Paypal Shopping Cart plugin prior to 3.6 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that change plugin settings.
Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.5Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.0Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.5Tipsandtricks-hq Wordpress Simple Paypal Shopping CartTipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.2Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.3.1Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.4Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.8Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 2.3Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.3Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.6Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.9Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 3.2.7Tipsandtricks-hq Wordpress Simple Paypal Shopping Cart 1.2.2
NA

CVE-2014-2995

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin prior to 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitget_consumer_key parameter to...
Twitget Project Twitget
NA

CVE-2014-2559

Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin prior to 3.3.3 for WordPress allow remote malicious users to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/o...
Twitget Project Twitget
NA

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions prior to 3.6.8, for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Adrotateplugin AdrotateAdrotateplugin Adrotate 0.1Adrotateplugin Adrotate 0.2Adrotateplugin Adrotate 0.3Adrotateplugin Adrotate 0.4Adrotateplugin Adrotate 0.5Adrotateplugin Adrotate 0.6Adrotateplugin Adrotate 0.7Adrotateplugin Adrotate 0.7.1Adrotateplugin Adrotate 0.8Adrotateplugin Adrotate 1.0Adrotateplugin Adrotate 2.0Adrotateplugin Adrotate 2.0.1Adrotateplugin Adrotate 2.1Adrotateplugin Adrotate 2.2Adrotateplugin Adrotate 2.3Adrotateplugin Adrotate 2.3.1Adrotateplugin Adrotate 2.4Adrotateplugin Adrotate 2.4.1Adrotateplugin Adrotate 2.4.2Adrotateplugin Adrotate 2.4.3Adrotateplugin Adrotate 2.4.4
NA

CVE-2013-3526

Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic Analyzer plugin, possibly 3.3.2 and previous versions, for WordPress allows remote malicious users to inject arbitrary web script or HTML via the aoid parameter.
Wptrafficanalyzer Trafficanalyzer 1.0.0Wptrafficanalyzer Trafficanalyzer 1.1.0Wptrafficanalyzer Trafficanalyzer 1.1.1Wptrafficanalyzer Trafficanalyzer 1.1.2Wptrafficanalyzer Trafficanalyzer 1.1.3Wptrafficanalyzer Trafficanalyzer 1.2.0Wptrafficanalyzer Trafficanalyzer 1.3.0Wptrafficanalyzer Trafficanalyzer 1.4.0Wptrafficanalyzer Trafficanalyzer 1.5.0Wptrafficanalyzer Trafficanalyzer 1.6.0Wptrafficanalyzer Trafficanalyzer 1.6.1Wptrafficanalyzer Trafficanalyzer 1.7.0Wptrafficanalyzer Trafficanalyzer 1.8.0Wptrafficanalyzer Trafficanalyzer 1.9.0Wptrafficanalyzer Trafficanalyzer 2.0.0Wptrafficanalyzer Trafficanalyzer 2.1.0Wptrafficanalyzer Trafficanalyzer 2.2.0Wptrafficanalyzer Trafficanalyzer 2.2.1Wptrafficanalyzer Trafficanalyzer 2.3.0Wptrafficanalyzer Trafficanalyzer 2.4.0Wptrafficanalyzer Trafficanalyzer 2.4.1Wptrafficanalyzer Trafficanalyzer 2.5.0
NA

CVE-2013-1852

SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin prior to 3.8.1 for WordPress allows remote malicious users to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Kolja Schleich Leaguemanager 3.6.8Kolja Schleich Leaguemanager 3.6.7Kolja Schleich Leaguemanager 3.4.1Kolja Schleich Leaguemanager 3.6.9Kolja Schleich Leaguemanager 1.2.2Kolja Schleich Leaguemanager 3.0.3Kolja Schleich Leaguemanager 3.5.1Kolja Schleich Leaguemanager 3.7Kolja Schleich Leaguemanager 2.2Kolja Schleich Leaguemanager 3.2Kolja Schleich Leaguemanager 3.5.6Kolja Schleich Leaguemanager 3.0.2Kolja Schleich Leaguemanager 1.4.2Kolja Schleich Leaguemanager 2.5.2Kolja Schleich LeaguemanagerKolja Schleich Leaguemanager 3.5Kolja Schleich Leaguemanager 2.9.2Kolja Schleich Leaguemanager 3.5.2Kolja Schleich Leaguemanager 3.6.2Kolja Schleich Leaguemanager 3.1.9Kolja Schleich Leaguemanager 3.0.1Kolja Schleich Leaguemanager 1.3
NA

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin prior to 3.3.4 rev40279 for WordPress allows remote malicious users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct...
Envato Complete Gallery Manager Plugin 3.2.4Envato Complete Gallery Manager Plugin 3.1.1Envato Complete Gallery Manager Plugin 1.0.2Envato Complete Gallery Manager Plugin 3.0.0Envato Complete Gallery Manager Plugin 3.2.6Envato Complete Gallery Manager Plugin 3.3.1Envato Complete Gallery Manager PluginEnvato Complete Gallery Manager Plugin 2.0.1Envato Complete Gallery Manager Plugin 2.0.0Envato Complete Gallery Manager Plugin 3.2.3Envato Complete Gallery Manager Plugin 1.0.0Envato Complete Gallery Manager Plugin 3.3.0Envato Complete Gallery Manager Plugin 3.2.0Envato Complete Gallery Manager Plugin 3.3.2Envato Complete Gallery Manager Plugin 3.2.5Envato Complete Gallery Manager Plugin 3.1.0Envato Complete Gallery Manager Plugin 3.2.8Envato Complete Gallery Manager Plugin 3.2.7Envato Complete Gallery Manager Plugin 3.0.1Envato Complete Gallery Manager Plugin 2.0.3Envato Complete Gallery Manager Plugin 1.0.1Envato Complete Gallery Manager Plugin 2.0.2
NA

CVE-2015-3429

Cross-site scripting (XSS) vulnerability in example.html in Genericons prior to 3.3.1, as used in WordPress prior to 4.2.2, allows remote malicious users to inject arbitrary web script or HTML via a fragment identifier.
Automattic GenericonsDebian Debian Linux 8.0
NA

CVE-2013-1636

Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin prior to 1.6.3 for WordPress, JNews (com_jnews) component 8.0.1 for Joomla!, and CiviCRM 3.1.0 up to and including 4.2.9 and 4.3.0 u...
Blair Williams Pretty Link Lite 1.6.1Blair Williams Pretty Link Lite 1.6.0Blair Williams Pretty Link LiteJoobi Com Jnews 8.0.1Civicrm Civicrm 3.1.3Civicrm Civicrm 4.2.5Civicrm Civicrm 3.1.0Civicrm Civicrm 4.1.2Civicrm Civicrm 4.3.1Civicrm Civicrm 4.1.4Civicrm Civicrm 4.2.8Civicrm Civicrm 4.1.1Civicrm Civicrm 4.2.7Civicrm Civicrm 3.4.0Civicrm Civicrm 4.3.0Civicrm Civicrm 3.3.1Civicrm Civicrm 3.1.1Civicrm Civicrm 3.3.0Civicrm Civicrm 3.2.4Civicrm Civicrm 3.2.1Civicrm Civicrm 3.2.3Civicrm Civicrm 3.3.5
NA

CVE-2013-6342

Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin prior to 4.0.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-admin/options-general.php.
Tweet-blender Tweet-blender 3.2.2Tweet-blender Tweet-blender 2.0.1Tweet-blender Tweet-blender 3.3.9Tweet-blender Tweet-blender 3.3.6Tweet-blender Tweet-blender 3.3.15Tweet-blender Tweet-blender 3.1.5Tweet-blender Tweet-blender 3.0.1Tweet-blender Tweet-blender 3.3.7Tweet-blender Tweet-blender 3.1.12Tweet-blender Tweet-blender 3.3.4Tweet-blender Tweet-blender 2.4.6Tweet-blender Tweet-blender 3.3.5Tweet-blender Tweet-blender 3.1.7Tweet-blender Tweet-blender 2.0.5Tweet-blender Tweet-blender 3.3.13Tweet-blender Tweet-blender 2.4.5Tweet-blender Tweet-blender 3.1.8Tweet-blender Tweet-blender 3.0.4Tweet-blender Tweet-blender 2.3.0Tweet-blender Tweet-blender 3.3.8Tweet-blender Tweet-blender 3.1.10Tweet-blender Tweet-blender 3.1.11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSRFserver-side request forgeryCVE-2024-30067CVE-2024-5553CVE-2024-30095IDORCVE-2024-35252CVE-2024-23692CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook