CVE-2018-5366

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5365

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5363

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

CVE-2018-5361

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5368

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

CVE-2018-5369

The SrbTransLatin plugin 1.46 for WordPress is affected by CVE-2018-5369: a Cross-Site Scripting (XSS) vulnerability via the srbtranslatoptions action to wp-admin/options-general.php with the lang_identificator parameter. This, as documented, can allow injection of arbitrary web script or HTML. S...

PT-2018-17064

Name of the Vulnerable Software and Affected Versions: responsive-coming-soon-page plugin version 1.1.18 Description: A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the logo height parameter in the...

PT-2018-17052

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the "weblizar pffree settings save...

PT-2018-17053

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. The problem is related to cross-site scripting XSS that can occur through the PFFREE Access Token...

CVE-2018-5369: Improper Neutralization of Input During Web Page Generation

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a langidentificator parameter...

CVE-2018-5366: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5368: Cross-Site Request Forgery (CSRF)

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

PT-2018-17051

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists. This is due to the dark mode end parameter in the "wp-admin/profile.php" endpoint. Recommendation...

PT-2018-17050

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists via the dark mode start parameter in the "wp-admin/profile.php" API endpoint. Recommendations For...

PT-2018-17066

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue exists in the read-and-understood plugin for WordPress, where cross-site scripting XSS is possible. This occurs via the "wp-admin/options-general.php" endpoint, specifically...

PT-2018-17058

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. Cross-site scripting XSS exists through the coming-soon title parameter in the "wp-admin/admin.ph...