PT-2018-17057

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A Cross-Site Request Forgery CSRF issue was discovered in the responsive-coming-soon-page plugin for WordPress. The issue exists via the wp-admin/admin.php endpoint. Recommendations...

PT-2018-17072

Name of the Vulnerable Software and Affected Versions: booking-calendar plugin version 2.1.7 Description: A security issue was found in the booking-calendar plugin for WordPress, where a CSRF exists via the "wp-admin/admin.php" API endpoint. Recommendations: For version 2.1.7, update to a newer...

PT-2018-17065

Name of the Vulnerable Software and Affected Versions: responsive-coming-soon-page plugin version 1.1.18 Description: A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the bg color parameter in the...

PT-2018-17062

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the button text link parameter in...

PT-2018-17063

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the social icon 1 parameter in the wp-admin/admin.php page. Recommendations For...

PT-2018-17060

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the logo width parameter in the...

PT-2018-17061

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title parameter in the...

CVE-2018-5367: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

CVE-2018-5365: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5361: Cross-Site Request Forgery (CSRF)

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

CVE-2018-5364: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

PT-2018-17059

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the coming-soon sub title parameter in the "wp-admin/admin.php" endpoint...

CVE-2018-5362: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepage parameter to wp-admin/options.php...

CVE-2018-5363: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

PT-2018-16919

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS flaw. It is triggered via the wpglobus optionpost typepage parameter to the wp-admin/options.php endpoint. Recommendations For WPGlobus plugin version 1.9....

PT-2018-16925

Name of the Vulnerable Software and Affected Versions SrbTransLatin plugin version 1.46 Description The issue concerns a CSRF vulnerability. It can be exploited via an srbtranslatoptions action to the "/wp-admin/options-general.php" API endpoint. Recommendations For SrbTransLatin plugin version...

PT-2018-16921

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionbrowser redirectredirect by language parameter to the wp-admin/options.php endpoint. Recommendations For...

PT-2018-16924

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the wpglobus optionpost typepost parameter to the wp-admin/options.php endpoint. Recommendations For WPGlobus plugin version 1.9....

PT-2018-16922

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionselector wp list pagesshow selector parameter to the wp-admin/options.php endpoint. Recommendations For...

PT-2018-16918

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a CSRF problem. It affects the wp-admin/options.php endpoint. There is no information provided about the estimated number of potentially affected devices or real-world incidents wher...