UBUNTU-CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

DEBIAN-CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063

CVE-2017-9063 affects WordPress before 4.7.5 and is a stored XSS in the Customizer due to an invalid customization session. Impact: potential script execution in users’ browsers. remediation: upgrade WordPress to 4.7.5 or later. Notes from connected docs confirm the issue details and version boun...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

WordPress 3.4.0-4.7.4 - Customizer XSS & CSRF

...

WordPress < 4.5.3 Multiple Vulnerabilities

Binary data 9388.prm...

DEBIAN-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

UBUNTU-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

Design/Logic Flaw

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

CVE-2016-5832 affects WordPress prior to 4.5.3, where the customizer could be abused by remote attackers to bypass redirected navigation restrictions via unspecified vectors. Impact is bypass of redirection restrictions; no data exposure or other impacts stated in the provided documents. The issu...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

WordPress Redirection Bypass Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A redirection bypass vulnerability exists in the WordPress 4.5.2 and earlier versions of the customizer, which can be exploited by an attacker to bypass redirection...

WordPress <= 4.5.2 - BYPASS #4

The customizer allows an attacker to bypass intended redirection restrictions via unspecified vectors. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass-1...