WordPress plugin Bulk Edit and Create User Profiles 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Bulk Edit and Create User Profiless plugin versions prior to 1.5.14 have a cross-site scripting...

WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugi...

WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin < 1.1.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin versions 1.1.9. Solution Update the WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin to the latest available version at least...

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin < 1.7.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin versions 1.7.13. Solution Update the WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin to the latest available version at least...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least...

WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin < 1.5.23 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin versions 1.5.23. Solution Update the WordPress Bulk Edit Categories and Tags – Create Thousands Quickly on the Editor plugin to the latest available...

WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin < 1.5.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin versions 1.5.13. Solution Update the WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin to the latest available version at...

WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Bulk Edit Posts and Products in Spreadsheet plugin versions 2.24.13. Solution Update the WordPress Bulk Edit Posts and Products in Spreadsheet plugin to the latest available version at least 2.24.13...

WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin < 1.5.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin versions 1.5.13. Solution Update the WordPress Bulk Edit and Create User Profiles – WP Sheet Editor plugin to the latest available version at least 1.5.13...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least 1.3.28...

WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin < 1.1.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin versions 1.1.9. Solution Update the WordPress Bulk Edit Events – Create Events in a Bulk Editor plugin to the latest available version at least 1.1.9...

WordPress Bulk Edit Posts and Products in Spreadsheet plugin < 2.24.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Bulk Edit Posts and Products in Spreadsheet plugin versions 2.24.13. Solution Update the WordPress Bulk Edit Posts and Products in Spreadsheet plugin to the latest available version at least 2.24.13...

WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin < 1.7.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin versions 1.7.13. Solution Update the WordPress WooCommerce Bulk Edit Products – WP Sheet Editor plugin to the latest available version at least 1.7.13...

Woocommerce Products Price Bulk Edit <= 2.0 - XSS

Plugin is still affected and has been closed...

Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities

Document Title: =============== Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=742 Barracuda Networks Security ID: BNSEC-671 Release Date: ============= 2018-07-22 Vulnerability Laboratory ID...

WordPress 3.7.1 & 3.8.1 - Privilege Escalation

Description From the researcher edik who discovered the vulnerability: Using the bulk edit feature you can publish posts and pages PUBLICLY without the publishing-cap. The problem is that there are no checks for publishing-cap's on serverside. It's only protected in UI. How to reproduce: 1. Login...

WordPress < 3.0.5 Multiple Vulnerabilities

According to its version number, the installation of WordPress hosted on the remote web server is affected by multiple vulnerabilities : - The application is prone to multiple cross-site scripting vulnerabilities. An attacker can exploit these issues through the 'title' field of the 'Quick/Bulk...