15 matches found
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
EUVD-2020-29506
Malware in sbrugna...
CVE-2020-8658
The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this...
CVE-2020-8658
The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In...
Cross site request forgery (csrf)
The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In...
CVE-2020-8658
The CVE concerns WordPress plugin BestWebSoft Htaccess (
WordPress Htaccess by BestWebSoft plugin <= 1.8.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability discovered by V1n1v131r4 in WordPress Htaccess by BestWebSoft plugin versions = 1.8.1. Solution Update the WordPress Htaccess by BestWebSoft plugin to the latest available version at least 1.8.2...
WordPress htaccess plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. htaccess is an access control plugin used in it. A cross-site scripting vulnerability exists in the WordPress htaccess plugin versions...
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
Cross site scripting
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
CVE-2017-18496
Summary for CVE-2017-18496 : The WordPress htaccess plugin from BestWebSoft, prior to version 1.7.6, contains multiple Cross‑Site Scripting (XSS) flaws. Technical details across sources indicate the vulnerability resides in the htaccess plugin’s handling of user-supplied data, enabling an authent...
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
PT-2019-8431
Name of the Vulnerable Software and Affected Versions WordPress htaccess plugin versions prior to 1.7.6 Description The issue concerns multiple XSS problems. Recommendations For versions prior to 1.7.6, update to version 1.7.6 or later to resolve the issue...
