freewvs.git

Strukturansicht: 06586d8
06586d85f3d32b6bfa6bf39099068a3887d5a6f3
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
1) [
2)   {
3)     "name": "Serendipity-mycalendar",
4)     "url": "https://s9y.org",
5)     "safe": "0.13",
6)     "vuln": "CVE-2007-6390",
7)     "detection": [
8)       {
9)         "file": "serendipity_event_mycalendar.php",
10)         "variable": "$propbag->add('version'",
11)         "subdir": 0
12)       }
13)     ]
14)   },
15)   {
16)     "name": "Serendipity-freetag",
17)     "url": "https://s9y.org",
18)     "safe": "3.69",
19)     "vuln": "https://github.com/s9y/additional_plugins/commit/3edecdb7eccc24e0d5c63a3d5702dba54599bda3",
20)     "detection": [
21)       {
22)         "file": "serendipity_event_freetag.php",
23)         "variable": "$propbag->add('version'",
24)         "subdir": 0
25)       }
26)     ]
27)   },
28)   {
29)     "name": "SquirrelMail-gpg",
30)     "url": "https://squirrelmail.org/plugin_view.php?id=153",
31)     "safe": "2.1",
32)     "vuln": "CVE-2007-3779",
33)     "detection": [
34)       {
35)         "file": "gpg_pref_functions.php",
36)         "variable": "$GPG_VERSION",
37)         "subdir": 0
38)       }
39)     ]
40)   },
41)   {
42)     "name": "Drupal-Views",
43)     "url": "https://www.drupal.org/project/views",
44)     "safe": "2.13",
45)     "vuln": "CVE-2011-4113",
46)     "detection": [
47)       {
48)         "file": "views.info",
49)         "variable": "version = \"6.x",
50)         "subdir": 0
51)       }
52)     ]
53)   },
54)   {
55)     "name": "Wordpress-timthumb",
56)     "url": "https://github.com/GabrielGil/TimThumb",
57)     "safe": "2.8.14",
58)     "vuln": "CVE-2014-4663",
59)     "detection": [
60)       {
61)         "file": "timthumb.php",
62)         "variable": "('VERSION',",
63)         "subdir": 0,
64)         "extra_match": "TimThumb"
65)       }
66)     ]
67)   },
68)   {
69)     "name": "Wordpress-timthumb-renamed",
70)     "url": "https://github.com/GabrielGil/TimThumb",
71)     "safe": "2.8.14",
72)     "vuln": "CVE-2014-4663",
73)     "detection": [
74)       {
75)         "file": "thumb.php",
76)         "variable": "('VERSION',",
77)         "subdir": 0,
78)         "extra_match": "TimThumb"
79)       }
80)     ]
81)   },
82)   {
83)     "name": "Joomla-JCE",
84)     "url": "https://www.joomlacontenteditor.net/",
85)     "safe": "2.1",
86)     "vuln": "CVE-2012-2902",
87)     "detection": [
88)       {
89)         "file": "editor.php",
90)         "variable": "$_version",
91)         "subdir": 3,
92)         "extra_match": "JCE class"
93)       }
94)     ]
95)   },
96)   {
97)     "name": "WP Super Cache",
98)     "url": "https://wordpress.org/plugins/wp-super-cache/",
Hanno Böck wp super cache update

Hanno Böck authored 3 years ago

 
99)     "safe": "1.7.3",
100)     "vuln": "CVE-2021-24329",
101)     "latest": "1.7.3",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
102)     "detection": [
103)       {
104)         "file": "wp-cache.php",
105)         "variable": "Version:",
106)         "subdir": 0,
107)         "extra_match": "Plugin Name: WP Super Cache"
108)       }
109)     ]
110)   },
111)   {
112)     "name": "W3 Total Cache",
113)     "url": "https://wordpress.org/plugins/w3-total-cache/",
Hanno Böck update w3 total cache

Hanno Böck authored 3 years ago

 
114)     "safe": "2.1.3",
115)     "vuln": "https://wordpress.org/plugins/w3-total-cache/#developers",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
116)     "detection": [
117)       {
118)         "file": "w3-total-cache.php",
119)         "variable": "Version:",
120)         "subdir": 0,
121)         "extra_match": "Plugin Name: W3 Total Cache"
122)       }
123)     ]
124)   },
125)   {
126)     "name": "phpThumb",
127)     "url": "http://phpthumb.sourceforge.net/",
128)     "safe": "1.7.10",
129)     "vuln": "CVE-2010-1598",
130)     "detection": [
131)       {
132)         "file": "phpthumb.class.php",
133)         "variable": "$phpthumb_version",
134)         "subdir": 0
135)       }
136)     ]
137)   },
138)   {
139)     "name": "Wordpress-Jetpack",
140)     "url": "https://jetpack.com/",
Hanno Böck update jetpack

Hanno Böck authored 1 year ago

 
141)     "safe": "12.1.1",
142)     "old_safe": "12.0.1,11.9.2,11.8.5,11.7.2,11.6.1,11.5.2,11.4.1,11.3.3,11.2.1,11.1.3,11.0.1,10.9.2,10.8.1,10.7.1,10.6.2",
143)     "vuln": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
144)     "detection": [
145)       {
146)         "file": "jetpack.php",
147)         "variable": "JETPACK__VERSION",
148)         "subdir": 0
149)       }
150)     ]
151)   },
152)   {
153)     "name": "Wordpress-MailPoet",
154)     "url": "https://www.mailpoet.com/",
155)     "safe": "2.6.8",
156)     "vuln": "CVE-2014-4726",
157)     "detection": [
158)       {
159)         "file": "base.php",
160)         "variable": "static $version",
161)         "subdir": 0,
162)         "extra_match": "WYSIJA_object"
163)       }
164)     ]
165)   },
166)   {
167)     "name": "Wordpress-CustomContact",
168)     "url": "https://wordpress.org/plugins/custom-contact-forms/",
169)     "safe": "5.1.0.4",
Hanno Böck update various URLs to http...

Hanno Böck authored 4 years ago

 
170)     "vuln": "https://blog.sucuri.net/2014/08/database-takeover-in-custom-contact-forms.html",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
171)     "detection": [
172)       {
173)         "file": "custom-contact-forms.php",
174)         "variable": "Version",
175)         "subdir": 0
176)       }
177)     ]
178)   },
179)   {
180)     "name": "Wordpress-SliderRevolution",
181)     "url": "https://revolution.themepunch.com/",
182)     "safe": "4.2.3",
183)     "vuln": "CVE-2015-5151",
184)     "note": "unclear about exact version",
185)     "detection": [
186)       {
187)         "file": "revslider.php",
188)         "variable": "$revSliderVersion",
189)         "subdir": 0
190)       }
191)     ]
192)   },
193)   {
194)     "name": "Wordpress-NextGEN",
195)     "url": "https://wordpress.org/plugins/nextgen-gallery/",
Hanno Böck update wp plugins

Hanno Böck authored 2 years ago

 
196)     "safe": "3.5.0",
197)     "vuln": "CVE-2020-35942",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
198)     "detection": [
199)       {
200)         "file": "nggallery.php",
201)         "variable": "NGG_PLUGIN_VERSION",
202)         "subdir": 0
203)       }
204)     ]
205)   },
206)   {
207)     "name": "Wordpress-Akismet",
208)     "url": "https://wordpress.org/plugins/akismet/",
209)     "safe": "3.1.5",
210)     "vuln": "CVE-2015-9357",
211)     "detection": [
212)       {
213)         "file": "akismet.php",
214)         "variable": "AKISMET_VERSION",
215)         "subdir": 0
216)       }
217)     ]
218)   },
219)   {
220)     "name": "Wordpress-AllInOneSEO",
221)     "url": "https://semperplugins.com/all-in-one-seo-pack-changelog/",
222)     "safe": "3.2.7",
223)     "vuln": "CVE-2019-16520",
224)     "detection": [
225)       {
226)         "file": "all_in_one_seo_pack.php",
227)         "variable": "define( 'AIOSEOP_VERSION'",
228)         "subdir": 0
229)       }
230)     ]
231)   },
232)   {
233)     "name": "Wordpress-DownloadManager",
234)     "url": "https://wordpress.org/plugins/download-manager/",
Hanno Böck wordpress downloadmanager u...

Hanno Böck authored 3 years ago

 
235)     "safe": "3.1.07",
236)     "vuln": "https://de.wordpress.org/plugins/download-manager/#developers",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
237)     "detection": [
238)       {
239)         "file": "download-manager.php",
240)         "variable": "define('WPDM_Version'",
241)         "subdir": 0
242)       }
243)     ]
244)   },
245)   {
246)     "name": "Wordpress-Fancybox",
247)     "url": "https://wordpress.org/plugins/fancybox-for-wordpress/",
248)     "safe": "3.0.4",
249)     "vuln": "CVE-2015-1494",
250)     "detection": [
251)       {
252)         "file": "fancybox.php",
253)         "variable": "FBFW_VERSION",
254)         "subdir": 0
255)       }
256)     ]
257)   },
258)   {
259)     "name": "Joomla-Googlemaps",
260)     "url": "http://joomlacode.org/gf/project/mambot_google1/",
261)     "safe": "3.1",
Hanno Böck update various URLs to http...

Hanno Böck authored 4 years ago

 
262)     "vuln": "CVE-2013-7428",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
263)     "detection": [
264)       {
265)         "file": "plugin_googlemap3.perm",
266)         "variable": "<version>",
267)         "subdir": 0
268)       }
269)     ]
270)   },
271)   {
272)     "name": "Wordpress-SEObyYoast",
273)     "url": "https://wordpress.org/plugins/wordpress-seo/",
274)     "safe": "11.6.0",
275)     "vuln": "CVE-2019-13478",
276)     "detection": [
277)       {
278)         "file": "wp-seo-main.php",
279)         "variable": "WPSEO_VERSION",
280)         "subdir": 0
281)       }
282)     ]
283)   },
284)   {
285)     "name": "Wordpress-GoogleAnalyticsbyMonsterInsights",
286)     "url": "https://wordpress.org/plugins/google-analytics-for-wordpress/changelog/",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
287)     "safe": "7.2.0",
288)     "vuln": "https://wpvulndb.com/vulnerabilities/9157/",
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
289)     "detection": [
290)       {
291)         "file": "googleanalytics.php",
292)         "variable": "GAWP_VERSION",
293)         "subdir": 0
294)       }
295)     ]
296)   },
297)   {
298)     "name": "Wordpress-Captcha",
299)     "url": "https://wordpress.org/plugins/captcha/",
300)     "safe": "4.4.5",
301)     "vuln": "https://www.wordfence.com/blog/2017/12/backdoor-captcha-plugin/",
302)     "detection": [
303)       {
304)         "file": "captcha.php",
305)         "variable": "Version:",
306)         "subdir": 0
307)       }
308)     ]
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
309)   },
310)   {
311)     "name": "Wordpress-ContactForm7",
312)     "url": "https://contactform7.com/",
Hanno Böck contactform7 update

Hanno Böck authored 3 years ago

 
313)     "safe": "5.3.2",
314)     "vuln": "CVE-2020-35489",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
315)     "detection": [
316)       {
317)         "file": "wp-contact-form-7.php",
318)         "variable": "WPCF7_VERSION",
319)         "subdir": 0
320)       }
321)     ]
322)   },
323)   {
324)     "name": "Wordpress-ACF",
325)     "url": "https://www.advancedcustomfields.com/",
Hanno Böck wordpress ACF update

Hanno Böck authored 1 week ago

 
326)     "safe": "6.3.8",
327)     "vuln": "https://www.advancedcustomfields.com/blog/acf-6-3-8-security-release/",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
328)     "detection": [
329)       {
330)         "file": "acf.php",
Hanno Böck make acf detect pro and fre...

Hanno Böck authored 4 years ago

 
331)         "variable": "Version:",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
332)         "extra_match": "Advanced Custom Fields",
333)         "subdir": 0
334)       }
335)     ]
336)   },
337)   {
338)     "name": "Wordpress-Updraftplus",
339)     "url": "https://updraftplus.com/",
Hanno Böck update for wordpress-updraf...

Hanno Böck authored 1 year ago

 
340)     "safe": "1.23.4",
341)     "vuln": "CVE-2023-32960",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
342)     "detection": [
343)       {
344)         "file": "updraftplus.php",
345)         "variable": "Version:",
346)         "subdir": 0
347)       }
348)     ]
349)   },
350)   {
351)     "name": "Wordpress-GoogleXMLSitemaps",
Hanno Böck don't use localized wordpre...

Hanno Böck authored 4 years ago

 
352)     "url": "https://wordpress.org/plugins/google-sitemap-generator/",
Hanno Böck update googlexmlsitemaps pl...

Hanno Böck authored 2 years ago

 
353)     "safe": "4.1.1",
354)     "vuln": "https://wordpress.org/plugins/google-sitemap-generator/#developers",
Hanno Böck update and add some wordpre...

Hanno Böck authored 4 years ago

 
355)     "detection": [
356)       {
357)         "file": "sitemap.php",
358)         "variable": "Version:",
359)         "extra_match": "Google XML Sitemaps Generator for WordPress",
360)         "subdir": 0
361)       }
362)     ]
Hanno Böck add wp-duplicatepost

Hanno Böck authored 4 years ago

 
363)   },
364)   {
365)     "name": "Wordpress-DuplicatePost",
366)     "url": "https://wordpress.org/plugins/duplicate-post/",
367)     "safe": "3.2.4",
368)     "vuln": "https://packetstormsecurity.com/files/154622/Duplicate-Post-3.2.3-Cross-Site-Scripting.html",
369)     "detection": [
370)       {
371)         "file": "duplicate-post.php",
372)         "variable": "DUPLICATE_POST_CURRENT_VERSION",
373)         "subdir": 0
374)       }
375)     ]
Hanno Böck add themegrill

Hanno Böck authored 4 years ago

 
376)   },
377)   {
378)     "name": "Wordpress-ThemegrillDemoImporter",
379)     "url": "https://wordpress.org/plugins/themegrill-demo-importer/",
380)     "safe": "1.6.3",
381)     "vuln": "https://www.openwall.com/lists/oss-security/2020/02/19/1",
382)     "detection": [
383)       {
384)         "file": "class-themegrill-demo-importer.php",
385)         "variable": "$version",
386)         "subdir": 1
387)       }
388)     ]
Hanno Böck add woocommerce

Hanno Böck authored 4 years ago

 
389)   },
390)   {
391)     "name": "Wordpress-WooCommerce",
392)     "url": "https://woocommerce.com/",
393)     "safe": "3.9.2",
394)     "vuln": "https://woocommerce.wordpress.com/2020/02/13/woocommerce-3-9-2-security-release/",
395)     "detection": [
396)       {
397)         "file": "woocommerce.php",
398)         "variable": "Version:",
399)         "subdir": 0
400)       }
401)     ]
Hanno Böck add allinonewpmigration

Hanno Böck authored 4 years ago

 
402)   },
403)   {
404)     "name": "Wordpress-AllinoneWPMigration",
405)     "url": "https://wordpress.org/plugins/all-in-one-wp-migration/",
Hanno Böck Update wordpress all-in-One...

Hanno Böck authored 1 year ago

 
406)     "safe": "7.41",
407)     "vuln": "CVE-2021-24216",
Hanno Böck add allinonewpmigration

Hanno Böck authored 4 years ago

 
408)     "detection": [
409)       {
410)         "file": "constants.php",
411)         "variable": "AI1WM_VERSION",
412)         "subdir": 0
413)       }
414)     ]
Hanno Böck add rank math

Hanno Böck authored 4 years ago

 
415)   },
416)   {
417)     "name": "Wordpress-SEO-by-Rank-Math",
418)     "url": "https://rankmath.com/",
419)     "safe": "1.0.41",
420)     "vuln": "https://www.wordfence.com/blog/2020/03/critical-vulnerabilities-affecting-over-200000-sites-patched-in-rank-math-seo-plugin/",
421)     "detection": [
422)       {
423)         "file": "rank-math.php",
424)         "variable": "$version",
425)         "subdir": 0
426)       }
427)     ]
Hanno Böck add bbpress

Hanno Böck authored 4 years ago

 
428)   },
429)   {
430)     "name": "bbPress",
431)     "url": "https://bbpress.org/",
432)     "safe": "2.6.5",
433)     "vuln": "CVE-2020-13693",
434)     "detection": [
435)       {
436)         "file": "bbpress.php",
437)         "variable": "$this->version",
438)         "subdir": 0
439)       }
440)     ]
Hanno Böck add wordpress file manager

Hanno Böck authored 4 years ago

 
441)   },
442)   {
443)     "name": "Wordpress-File-Manager",
444)     "url": "https://wordpress.org/plugins/wp-file-manager/",
445)     "safe": "6.9",
446)     "vuln": "https://seravo.com/blog/0-day-vulnerability-in-wp-file-manager/",
447)     "detection": [
448)       {
449)         "file": "file_folder_manager.php",
450)         "variable": "$ver",
451)         "subdir": 0
452)       }
453)     ]
Hanno Böck add roundcube carddav plugin

Hanno Böck authored 3 years ago

 
454)   },
455)   {
456)     "name": "Roundcube-RCMCardDAV",
457)     "url": "https://github.com/mstilkerich/rcmcarddav",
458)     "safe": "4.0.0",
459)     "vuln": "https://github.com/mstilkerich/rcmcarddav/releases/tag/v4.0.0-alpha1",
460)     "detection": [
461)       {
462)         "file": "carddav.php",
463)         "variable": "const PLUGIN_VERSION",
464)         "subdir": 0,
465)         "note": "4.0.0 and above"
466)       },
467)       {
468)         "file": "carddav_common.php",
469)         "variable": "RCM CardDAV plugin/",
470)         "subdir": 0,
471)         "note": "3.x"
472)       }
473)     ]
Hanno Böck add json db

Hanno Böck authored 4 years ago

 
474)   }