From bec7b5ed22c8b31558e54a25ef8c762b6a1b5430 Mon Sep 17 00:00:00 2001
From: Peter van der Laan <vanderlaan.pm@gmail.com>
Date: Fri, 25 Oct 2013 10:40:53 +0200
Subject: [PATCH 1/2] It's WordPress, not Wordpress

---
 data/plugin_vulns.xml | 86 +++++++++++++++++++++----------------------
 1 file changed, 43 insertions(+), 43 deletions(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index e5f0af14..106e4793 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -563,7 +563,7 @@
 
   <plugin name="apptha-banner">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -573,7 +573,7 @@
 
   <plugin name="apptha-slider-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -583,7 +583,7 @@
 
   <plugin name="blaze-slide-show-for-wordpress">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -593,7 +593,7 @@
 
   <plugin name="comment-extra-field">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -603,7 +603,7 @@
 
   <plugin name="fluid-accessible-rich-inline-edit">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -613,7 +613,7 @@
 
   <plugin name="fluid-accessible-pager">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -623,7 +623,7 @@
 
   <plugin name="fluid-accessible-uploader">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -633,7 +633,7 @@
 
   <plugin name="fluid-accessible-ui-options">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -643,7 +643,7 @@
 
   <plugin name="fresh-page">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -653,7 +653,7 @@
 
   <plugin name="mac-dock-photogallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -663,7 +663,7 @@
 
   <plugin name="pdw-file-browser">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -680,7 +680,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -690,7 +690,7 @@
 
   <plugin name="slide-show-pro">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -700,7 +700,7 @@
 
   <plugin name="smart-slide-show">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -710,7 +710,7 @@
 
   <plugin name="spotlightyour">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -720,7 +720,7 @@
 
   <plugin name="sprapid">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -730,7 +730,7 @@
 
   <plugin name="ultimate-tinymce">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
         <secunia>51224</secunia>
@@ -741,7 +741,7 @@
 
   <plugin name="wp-3dbanner-rotator">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -758,7 +758,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -768,7 +768,7 @@
 
   <plugin name="wp-bliss-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -778,7 +778,7 @@
 
   <plugin name="wp-carouselslideshow">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
         <secunia>51250</secunia>
@@ -797,7 +797,7 @@
 
   <plugin name="wp-dreamworkgallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -807,7 +807,7 @@
 
   <plugin name="wp-ecommerce-cvs-importer">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -817,7 +817,7 @@
 
   <plugin name="wp-extended">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -827,7 +827,7 @@
 
   <plugin name="wp-flipslideshow">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -844,7 +844,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -861,7 +861,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -896,7 +896,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -906,7 +906,7 @@
 
   <plugin name="wp-matrix-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -923,7 +923,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -940,7 +940,7 @@
       <type>UPLOAD</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -950,7 +950,7 @@
 
   <plugin name="wp-superb-slideshow">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -967,7 +967,7 @@
 
   <plugin name="wp-vertical-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -977,7 +977,7 @@
 
   <plugin name="wp-yasslideshow">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -1454,7 +1454,7 @@
 
   <plugin name="pica-photo-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -1478,7 +1478,7 @@
 
   <plugin name="mac-dock-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -2776,7 +2776,7 @@
       <type>MULTI</type>
     </vulnerability>
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -3097,7 +3097,7 @@
 
   <plugin name="nextgen-gallery">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
         <secunia>51271</secunia>
@@ -3222,7 +3222,7 @@
 
   <plugin name="dm-albums">
     <vulnerability>
-      <title>SWF Vulnerable to XSS Bundled in Many Wordpress Plugins</title>
+      <title>SWF Vulnerable to XSS Bundled in Many WordPress Plugins</title>
       <references>
         <url>http://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html</url>
       </references>
@@ -4683,7 +4683,7 @@
 
   <plugin name="cardoza-wordpress-poll">
     <vulnerability>
-      <title>Cardoza Wordpress poll - Cross-Site Request Forgery Vulnerability</title>
+      <title>Cardoza WordPress poll - Cross-Site Request Forgery Vulnerability</title>
       <references>
         <osvdb>89443</osvdb>
         <cve>2013-1401</cve>
@@ -4693,7 +4693,7 @@
       <fixed_in>34.06</fixed_in>
     </vulnerability>
     <vulnerability>
-      <title>Cardoza Wordpress poll - Multiple SQL injection vulnerabilities</title>
+      <title>Cardoza WordPress poll - Multiple SQL injection vulnerabilities</title>
       <references>
         <secunia>51942</secunia>
         <url>http://www.girlinthemiddle.net/2013/01/multiple-sql-injection-vulnerabilities.html</url>
@@ -4702,7 +4702,7 @@
       <type>SQLI</type>
     </vulnerability>
     <vulnerability>
-      <title>Cardoza Wordpress poll - Multiple SQL Injection Vulnerabilities</title>
+      <title>Cardoza WordPress poll - Multiple SQL Injection Vulnerabilities</title>
       <references>
         <secunia>50910</secunia>
       </references>
@@ -7503,7 +7503,7 @@
   
   <plugin name="wp-realty">
     <vulnerability>
-      <title>Wordpress - wp-realty - MySQL Time Based Injection</title>
+      <title>wp-realty - MySQL Time Based Injection</title>
       <references>
         <exploitdb>29021</exploitdb>
         <url>http://www.exploit-db.com/exploits/29021/</url>

From 0c406d72f6ec8d18c7df5620de2da1c9a33d361f Mon Sep 17 00:00:00 2001
From: Peter van der Laan <vanderlaan.pm@gmail.com>
Date: Fri, 25 Oct 2013 11:48:22 +0200
Subject: [PATCH 2/2] Update WordPress Theme vulns

---
 data/theme_vulns.xml | 46 +++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 41 insertions(+), 5 deletions(-)

diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index 37b89e22..0ae6c0ce 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -1248,9 +1248,11 @@
 
   <theme name="DailyDeal">
     <vulnerability>
-      <title>DailyDeal - Shell Upload</title>
+      <title>DailyDeal - File Upload Remote Code Execution</title>
       <references>
+        <osvdb>98924</osvdb>
         <url>http://packetstormsecurity.com/files/123748/</url>
+        <url>http://templatic.com/app-themes/daily-deal-premium-wordpress-app-theme</url>
       </references>
       <type>RCE</type>
     </vulnerability>
@@ -1730,7 +1732,7 @@
 
   <theme name="silverorchid">
     <vulnerability>
-      <title>silverOrchid - XSS Vulnerability</title>
+      <title>silverOrchid &lt;= 1.5.0 - XSS Vulnerability</title>
       <references>
         <osvdb>96723</osvdb>
         <secunia>54662</secunia>
@@ -1744,9 +1746,9 @@
     <vulnerability>
       <title>Caulk - path disclosure vulnerability</title>
       <references>
-        <osvdb>96723</osvdb>
-        <secunia>54662</secunia>
+        <osvdb>90889</osvdb>
         <url>http://packetstormsecurity.com/files/120632/</url>
+        <url>http://themeforest.net/item/caulk/76108</url>
       </references>
       <type>FPD</type>
     </vulnerability>
@@ -1759,7 +1761,7 @@
         <osvdb>98806</osvdb>
         <url>http://packetstormsecurity.com/files/123697/</url>
       </references>
-      <type>UNKNOWN</type>
+      <type>RCE</type>
     </vulnerability>
   </theme>
 
@@ -1818,4 +1820,38 @@
     </vulnerability>
   </theme>
 
+  <theme name="area53">
+    <vulnerability>
+      <title>AREA53 &lt;= 1.0.5 - File Upload Code Execution</title>
+      <references>
+        <osvdb>98927</osvdb>
+        <exploitdb>29068</exploitdb>
+        <url>http://www.securityfocus.com/bid/63306</url>
+        <url>http://themeforest.net/item/area53-a-responsive-html5-wordpress-theme/2538737</url>
+      </references>
+      <type>RCE</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="sahifa">
+    <vulnerability>
+      <title>Sahifa 2.4.0 - Multiple Script Path Disclosure Direct Request Path Disclosure</title>
+      <references>
+        <osvdb>88926</osvdb>
+        <url>http://packetstormsecurity.com/files/119191/</url>
+        <url>http://www.securityfocus.com/bid/57109</url>
+      </references>
+      <type>FPD</type>
+    </vulnerability>
+    <vulnerability>
+      <title>Sahifa 2.4.0 - Site Setting Reset CSRF</title>
+      <references>
+        <osvdb>88927</osvdb>
+        <url>http://packetstormsecurity.com/files/119191/</url>
+        <url>http://www.securityfocus.com/bid/57109</url>
+      </references>
+      <type>CSRF</type>
+    </vulnerability>
+  </theme>
+
 </vulnerabilities>