933 matches found
WordPress Simple Share Buttons Adder Plugin <= 6.0.0 - Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...
WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability
WordPress Social Essentials Social Stats and Sharing Buttons plugin version 1.3.1 suffers from a cross site scripting vulnerability. WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS Vulnerability Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Versi...
WordPress Social Essentials Social Stats And Sharing Buttons 1.3.1 XSS
Plugin Name : Social Essentials Social Stats and Sharing Buttons Effected Version : 1.3.1 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : Th...
Adobe Flash - scale9Grid Use-After-Free
Adobe Flash - scale9Grid Use-After-Free Source: https://code.google.com/p/google-security-research/issues/detail?id=380&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There is a use-after-free issue if the scale9Grid setting is called on an object with a member that then...
Adobe Flash - scale9Grid Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=380&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id There is a use-after-free issue if the scale9Grid setting is called on an object with a member that then frees display item. This issue occurs for...
WordPress Share Buttons Plugin <= 5.0.12 - Cross Site Scripting
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
AddThis Sharing Buttons <= 5.0.12 - Authenticated Cross-Site Scripting (XSS)
The WordPress Share Buttons Plugin – AddThis WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting (XSS)
A reflected XSS in "Simple Share Buttons Adder" before version 6.0.1 lead to a reflected cross-site scripting vulnerability on all pages where the "Simple Share Buttons Adder" was added usually all blog posts. Exploitation required that the browser did not encode the parameters sent to the server...
Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting (XSS)
A reflected XSS in "Simple Share Buttons Adder" before version 6.0.1 lead to a reflected cross-site scripting vulnerability on all pages where the "Simple Share Buttons Adder" was added usually all blog posts. Exploitation required that the browser did not encode the parameters sent to the server...
Social Media & Share Icons <= 1.1.1.11 - Authenticated Stored Cross-Site Scripting (XSS)
The Social Media Share Buttons & Social Sharing Icons WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress Really Simple Facebook Twitter Share Buttons Plugin <= 2.10.4 - CSRF
Because of this vulnerability, attackers can perform certain unauthorized actions in the context of the affected application. Solution Upgrade this plugin...
WordPress 2 Click Social Media Buttons Plugin <= 0.34 - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress Plugin Ad Buttons adbuttonsadmin.php Cross-Site Request Forgery Vulnerability
WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Ad Buttons Plugin for WordPress is an advertising plugin for wordpress. Ad Buttons Plugin for WordPress adbuttonsadmin.php...
WordPress Ad Buttons Plugin <= 2.3.1 - Multiple Vulnerabilities
This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Attackers can insert arbitrary script into admin page and do almost anything the admin user could typically do. Solution Update the plugin...
Ad Buttons <= 2.3.1 - CSRF & XSS
Plugin discontinued...
WordPress Ad Buttons 2.3.1 CSRF / Cross Site Scripting
================================================================ CSRF/Stored XSS Vulnerability in Ad Buttons Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ad Buttons Wordpress...
CVE-2014-4717
Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...
CVE-2014-4717
Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...
CVE-2014-4717
CVE-2014-4717 affects the WordPress plugin “Simple Share Buttons Adder” (versions prior to 4.5). The issue comprises multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions and trigger stored XSS via the ssba_share_text parameter in a save action to wp-admin/opt...