WordPress Plugin Social Media Widget by Acurax 3.2.5 - Cross-Site Request Forgery

Exploit Title: Social Media Widget by Acurax CSRF Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://www.acurax.com/ Software Link: https://wordpress.org/plugins/acurax-social-media-widget Version: 3.2.5 Tested on:...

WordPress Social Media Widget By Acurax 3.2.5 Cross Site Request Forgery

Exploit Title: Social Media Widget by Acurax CSRF Discovery Date: 2017-12-12 Exploit Author: Panagiotis Vagenas Author Link: https://twitter.com/panVagenas Vendor Homepage: http://www.acurax.com/ Software Link: https://wordpress.org/plugins/acurax-social-media-widget Version: 3.2.5 Tested on:...

Social Media Widget by Acurax <= 3.2.5 - Stored XSS & CSRF

The Social Media Widget by Acurax WordPress plugin was affected by a Stored XSS & CSRF security vulnerability...

Social Media Widget by Acurax <= 2.2 - Authenticated Stored Cross-Site Scripting (XSS)

The Social Media Widget by Acurax WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...