CVE Arsenal Intel

CVE-2019-25141

Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more Web Windows ⚡ nuclei

9.8

CRITICAL

EPSS

62.9%

2019 CWE-862 1 PoC

The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.3.9. This is due to missing capability checks on the admin_init() function, in addition to insufficient input validation. This makes it possible for unauthenticated attackers to modify the plugins settings and arbitrary options on the site that can be used to inject new administrative user accounts.

nuclei -t CVE-2019-25141.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-25213

Advanced Access Manager – Access Governance for WordPress Web Windows ⚡ nuclei

9.8

CRITICAL

EPSS

40.2%

2019 CWE-22 0 PoCs

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files such as wp-config.php

nuclei -t CVE-2019-25213.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2019-25152

Abandoned Cart Lite for WooCommerce Web Windows ⚡ nuclei

7.2

HIGH

EPSS

27.1%

2019 CWE-79 0 PoCs

The Abandoned Cart Lite for WooCommerce and Abandoned Cart Pro for WooCommerce plugins for WordPress are vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 5.1.3 and 7.12.0 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in user input that will execute on the admin dashboard.

nuclei -t CVE-2019-25152.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2019-5591

🔥 KEV Fortinet FortiOS Networking Windows ⚡ nuclei

6.5

MEDIUM

EPSS

48.4%

2019 0 PoCs

A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server.

nuclei -t CVE-2019-5591.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2019-9978

🔥 KEV Software Genérico Web Windows ⚡ nuclei

6.1

MEDIUM

EPSS

87.6%

2019 20 PoCs

The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.

nuclei -t CVE-2019-9978.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +14 más 🔍 GCVE ⚔ EDB

CVE-2019-15889

Software Genérico Web Windows ⚡ nuclei

6.1

MEDIUM

EPSS

5.0%

2019 5 PoCs

The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.

nuclei -t CVE-2019-15889.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 🔍 GCVE ⚔ EDB

CVE-2019-19985

Software Genérico Web Windows ⚡ nuclei

5.8

MEDIUM

EPSS

79.6%

2019 2 PoCs

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.

nuclei -t CVE-2019-19985.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2019-17231

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

0.1%

2019 0 PoCs

includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.

nuclei -t CVE-2019-17231.yaml ⎘

🔍 GCVE ⚔ EDB

CVE-2019-14223

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

37.3%

2019 1 PoC

An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).

nuclei -t CVE-2019-14223.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-15858

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

70.2%

2019 3 PoCs

admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.

nuclei -t CVE-2019-15858.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2019-6112

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

15.8%

2019 1 PoC

A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell Media plugin v2.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the keyword parameter (aka $search_term or the Search field).

nuclei -t CVE-2019-6112.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-20210

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

0.4%

2019 7 PoCs

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.

nuclei -t CVE-2019-20210.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 ↗ PoC 4 ↗ PoC 5 ↗ PoC 6 +1 más 🔍 GCVE ⚔ EDB

CVE-2019-19134

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

17.3%

2019 1 PoC

The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthenticated XSS via the views/dashboard/index.php p parameter because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to inject HTML or arbitrary JavaScript within the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based tokens or to launch other attacks.

nuclei -t CVE-2019-19134.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-15829

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

1.5%

2019 1 PoC

The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.

nuclei -t CVE-2019-15829.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-14789

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

0.9%

2019 1 PoC

The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

nuclei -t CVE-2019-14789.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-9912

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

0.8%

2019 2 PoCs

The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.

nuclei -t CVE-2019-9912.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB

CVE-2019-10692

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

88.8%

2019 1 PoC

In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.

nuclei -t CVE-2019-10692.yaml ⎘

↗ PoC 1 🔍 GCVE ⚔ EDB

CVE-2019-9881

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

32.9%

2019 3 PoCs

The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.

nuclei -t CVE-2019-9881.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2019-9880

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

72.9%

2019 3 PoCs

An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.

nuclei -t CVE-2019-9880.yaml ⎘

↗ PoC 1 ↗ PoC 2 ↗ PoC 3 🔍 GCVE ⚔ EDB

CVE-2019-16932

Software Genérico Web Windows ⚡ nuclei

N/A

UNKNOWN

EPSS

80.8%

2019 2 PoCs

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

nuclei -t CVE-2019-16932.yaml ⎘

↗ PoC 1 ↗ PoC 2 🔍 GCVE ⚔ EDB