303 matches found
WordPress YouTube Video Inserter plugin <= 1.2.1.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by p7e4 in WordPress YouTube Video Inserter plugin versions = 1.2.1.0. Solution This plugin has been closed as of September 7, 2021 and is not available for download. This closure is temporary, pending a full review...
Cross site request forgery (csrf)
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...
CVE-2015-9497
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...
CVE-2015-9497
Affected : WordPress with the Ad Inserter plugin (before 1.5.3). Vulnerability : CSRF that enables a resultant XSS via wp-admin/options-general.php?page=ad-inserter.php. Impact : allows an attacker to cause cross-site scripting and potentially manipulate admin actions; CVSS details show high impa...
WordPress ad-inserter plugin cross-site request forgery vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin used in it. A cross-site request forgery vulnerability exists in WordPress ad-inserter plugin...
PT-2019-7456
Name of the Vulnerable Software and Affected Versions ad-inserter plugin versions prior to 1.5.3 Description The issue concerns a CSRF vulnerability with resultant XSS in the ad-inserter plugin for WordPress. This can be exploited via the "wp-admin/options-general.php?page=ad-inserter.php"...
CVE-2015-9497: Cross-Site Request Forgery (CSRF)
The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...
WordPress Ad Inserter Plugin < 2.4.22 RCE Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113520";...
WordPress Ad Inserter Plugin < 2.4.20 Directory Traversal Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113519";...
WordPress ad-inserter plugin path traversal vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin that is used in this period. A path traversal vulnerability exists in the WordPress ad-inserter...
WordPress ad-inserter plugin input validation error vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin that is used in this period. WordPress ad-inserter plugin has an input validation error...
CVE-2019-15323
The ad-inserter plugin before 2.4.20 for WordPress has path traversal...
CVE-2019-15324
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution...
CVE-2019-15323
The ad-inserter plugin before 2.4.20 for WordPress has path traversal...
CVE-2019-15324
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution...
Path traversal
The ad-inserter plugin before 2.4.20 for WordPress has path traversal...
Remote code execution
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution...
CVE-2019-15324
The ad-inserter plugin before 2.4.22 for WordPress has remote code execution...
CVE-2019-15324
The CVE-2019-15324 entry concerns the WordPress plugin Ad Inserter prior to version 2.4.22, which is affected by a remote code execution vulnerability. Public records in multiple sources describe RCE in this plugin, with exploitation possible over the network and, in some disclosures, requiring a...
