CVE-2017-18487

The adsense-plugin aka Google AdSense plugin before 1.44 for WordPress has multiple XSS issues...

Cross site scripting

The adsense-plugin aka Google AdSense plugin before 1.44 for WordPress has multiple XSS issues...

CVE-2017-18487

The CVE-2017-18487 entry concerns the WordPress adsense-plugin (aka Google AdSense) before version 1.44, which contains multiple XSS vulnerabilities. The connected nuclei template confirms an AdPush/WordPress XSS issue in this plugin (CVE-2017-18487). The root cause is cross-site scripting in the...

CVE-2017-18487

The adsense-plugin aka Google AdSense plugin before 1.44 for WordPress has multiple XSS issues...

Presumed technical issue disrupts Google Adsense payouts worldwide

By Waqas Still didn't receive your Google Adsense payouts? Don't worry, you are not alone. For the many millions of Google Adsense users, the earnings derived from it is their bread and butter so when there is a delay in AdSense payouts, predictably there is online pandemonium as many seek answer...

mobilejoomla, 2.1.24, malcious redirects

mobilejoomla,2.1.24, malicious redirects. google adsense file added that may redirect all sites adsense revenue to the developer. File is not deleted on removing extension. Developer statement Extension Update Details Previously the free version of the Mobile extension added a file called ads.txt...

CVE-2015-1000009

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

Open redirect

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

CVE-2015-1000009

CVE-2015-1000009 affects the WordPress plugin google-adsense-and-hotel-booking version 1.05, specifically the proxy.php script. The vulnerability results in an open proxy/post proxy capability, allowing an attacker to proxy POST requests through the host site, potentially aiding attack concealmen...

CVE-2015-1000009

Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05...

Google AdSense - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Google AdSense published at the 'play' market has multiple vulnerabilities...

WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability

WordPress Google Adsense plugin version 1.29 suffers from a cross site scripting vulnerability. WordPress Google Adsense 1.29 Cross Site Scripting Vulnerability Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XS...

WordPress Google Adsense 1.29 Cross Site Scripting

Plugin Name : Google Adsense Effected Version : 1.29 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy

Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...

WordPress Google Adsense and Hotel Booking Plugin <= 1.05 - Open Redirection

The vulnerability is in the ./plugin/google-adsense-and-hotel-booking/proxy.php. It allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks. Solution Update the plugin...

Google Adsense & Hotel Booking <= 1.0.5 - Open Proxy

Plugin is still affected and has been closed. The code in ./plugin/google-adsense-and-hotel-booking/proxy.php allows an arbitrary user to proxy POST requests though the host site. This may allow attackers to hide attacks, or DoS a site if the POST request is pointed back at itself causing a loop...

WordPress Plugin Video Gallery 2.7 - SQL Injection

Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $GET'vid' is not...

WordPress Ad-Manager 1.1.2 Open Redirect

CVE-2014-8754 WordPress “Ad-Manager Plugin” Dest Redirect Privilege Escalation Exploit Title: WordPress Ad-Manager Plugin Dest Redirect Privilege Escalation Vulnerability Product: WordPress Ad-Manager Plugin Vendor: CodeCanyon Vulnerable Versions: 1.1.2 Tested Version: 1.1.2 Advisory Publication:...

Warning: Malicious version of FTP Software FileZilla stealing users' Credentials

Malware code can be very small, and the impact can be very severe! The Antivirus firm AVAST spotted a malicious version of the open source FTP File Transfer Protocol software 'FileZilla' out in the wild. The software is open source, but has been modified by the hackers that steal users'...

Free Monthly Websites 2.0 - Admin Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...