When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters before inserting them inside the wp-config.php file, leading to arbitrary PHP code […]
WebKit JIT – Int32/Double Arrays can have Proxy Objects in the Prototype Chains
Tags: 0day, remote exploitWordPress NikolayDyankovDesign theme version 2.0 suffers from an arbitrary file disclosure vulnerability.
WordPress Real-Estate-Listing-Realtyna-Wpl plugin version 4.3.2 suffers from a database disclosure vulnerability.
WordPress HighStand theme version 4.6.1 suffers from a database disclosure vulnerability.
WordPress Simple-E-Commerce-Shopping-Cart plugin version 2.2.5 suffers from a database disclosure vulnerability.
Joomla Acymailing component version 2.0.0 suffers from a database disclosure vulnerability.
WordPress Total-Child-Theme-Master theme version 1.0 suffers from an arbitrary file disclosure vulnerability.
