WordPress gigpress plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A cross-site scripting vulnerability exists in the...

WordPress gigpress plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A SQL injection vulnerability exists in the WordPress...

CVE-2015-9354

The gigpress plugin before 2.3.11 for WordPress has XSS...

CVE-2015-9353

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066...

Cross site scripting

The gigpress plugin before 2.3.11 for WordPress has XSS...

Sql injection

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066...

CVE-2015-9354

The gigpress plugin before 2.3.11 for WordPress has XSS...

CVE-2015-9354

CVE-2015-9354 concerns the WordPress plugin GigPress. The vulnerability is a cross-site scripting (XSS) flaw in GigPress up to version 2.3.11 (i.e., affected when using versions before 2.3.11). The underlying issue is a client-side script injection vulnerability within the plugin, enabling likely...

CVE-2015-9353

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066...

CVE-2015-9353

Affected software: WordPress GigPress plugin (before 2.3.11). Vulnerability: SQL injection in the admin area. Root cause: Improper handling of input in admin/handlers.php via the show_artist_id or show_venue_id parameters in an add action (gigpress.php) to wp-admin/admin.php. Impact: Remote authe...

WordPress GigPress Plugin <= 2.3.10 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and blind SQL injection vulnerabilities. Attackers can inject arbitrary JavaScript or HTML code or execute arbitrary SQL commands. Solution Update the plugin...

GigPress <= 2.3.10 - Authenticated XSS & Blind SQLi

The GigPress WordPress plugin was affected by an Authenticated XSS & Blind SQLi security vulnerability...

CVE-2015-4066

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...

Sql injection

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...

CVE-2015-4066

CVE-2015-4066 affects the WordPress GigPress plugin (prior to version 2.3.9). The vulnerability is an SQL injection in admin/handlers.php triggered by the show_artist_id/show_venue_id parameters in an add action within gigpress.php, allowing remote authenticated users to execute arbitrary SQL com...

CVE-2015-4066

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 showartistid or 2 showvenueid parameter in an add action in the gigpress.php page to wp-admin/admin.php...

WordPress GigPress Plugin 2.3.8 - SQL Injection

This WordPress GigPress plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin GigPress 2.3.8 - SQL Injection

WordPress Plugin GigPress 2.3.8 - SQL Injection Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+ Vulnerable version: 2.3.8 Fixed version: 2.3.9...

WordPress GigPress 2.3.8 SQL Injection Vulnerability

WordPress GigPress plugin version 2.3.8 suffers from a remote SQL injection vulnerability. Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+...

WordPress Plugin GigPress 2.3.8 - SQL Injection

Title: SQLi vulnerabilities in WordPress plugin "GigPress" Author: Adrián M. F. - adrimf85atgmaildotcom Date: 2015-05-25 Vendor Homepage: https://wordpress.org/plugins/gigpress/ Active installs: 20,000+ Vulnerable version: 2.3.8 Fixed version: 2.3.9 CVE: CVE-2015-4066 Vulnerabilities 2...