woodspeed

3 exploits Active since May 2015
EIP-2026-114054 EXPLOITDB text WRITEUP
WordPress Plugin Simple Photo Gallery 1.7.8 - Blind SQL Injection
CVE-2015-4127 EXPLOITDB text WORKING POC
Church Admin < 0.800 - Cross-Site Scripting via Address Parameter
Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/.
EIP-2026-113878 EXPLOITDB text WORKING POC
WordPress Plugin MailChimp Subscribe Forms 1.1 - Remote Code Execution