EUVD-2018-2038

Malware in sbrugna...

WordPress LatePoint plugin <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function vulnerability

Cross-Site Request Forgery to Account Takeover via changepassword Function vulnerability discovered by wesley wcraft in WordPress Plugin LatePoint versions = 5.1.94...

WordPress LatePoint plugin <= 5.1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin LatePoint versions = 5.1.94...