473 matches found
Google Advises Android Developers to Encrypt App Data On Device
Google today published a blog post recommending mobile app developers to encrypt data that their apps generate on the users' devices, especially when they use unprotected external storage that's prone to hijacking. Moreover, considering that there are not many reference frameworks available for t...
WordPress Jetpack plugin <=7.9 - Shortcode embedding system vulnerability
Shortcode embedding system vulnerability found by Adham Sadaqah in WordPress Jetpack plugin versions =7.9. Solution Update the WordPress Jetpack plugin to the latest available version at least 7.9.1...
Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code
The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Vulnerability in Shortcode Embed Code security vulnerability...
WordPress Jetpack Plugin Unspecified Security Vulnerability
Description The Jetpack plugin for WordPress is prone to an unspecified security vulnerability. Successfully exploiting this issue will allow attackers to perform unauthorized actions; this may aid in launching further attacks. Jetpack 5.1 through 7.9 are vulnerable. Technologies Affected WordPre...
WordPress Jetpack plugin cross-site scripting vulnerability (CNVD-2019-30395)
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Jetpack is one of the WordPress site security management tools used in it. A cross-site scripting vulnerability exists in the WordPress...
CVE-2015-9359
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
Design/Logic Flaw
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9359
The Jetpack plugin before 3.4.3 for WordPress has XSS via addqueryarg and removequeryarg...
CVE-2015-9359
The CVE-2015-9359 entry concerns the WordPress Jetpack plugin (pre-3.4.3) with a cross-site scripting (XSS) vulnerability exploitable via add_query_arg() and remove_query_arg(). Affected product: Jetpack plugin for WordPress; vulnerable component/behavior: input/output handling around query arg f...
WordPress woocommerce-jetpack plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. woocommerce-jetpack plugin is a price management plugin for e-commerce used in it. A cross-site scripting vulnerability exists in the...
CVE-2018-20966
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
CVE-2018-20966
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
Code injection
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
CVE-2018-20966
The CVE-2018-20966 entry documents a cross-site scripting (XSS) vulnerability in the WordPress plugin Woocommerce Jetpack before version 3.8.0, specifically in the Products Per Page feature. Affected software: woocommerce-jetpack plugin for WordPress. Root cause: lack of proper validation of clie...
CVE-2018-20966
The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature...
WordPress Caldera Forms plugin <= 1.8.1 - Unspecified security issue related to Caldera Forms Pro API
Unspecified security issue found and patched in WordPress Caldera Forms plugin versions = 1.8.1. Vulnerable only when connected to Caldera Forms Pro API and used with WordPress SEO by Yoast or Jetpack’s map module. Solution Update the WordPress Caldera Forms plugin to the latest available version...
WordPress Jetpack plugin <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by RIPS Technologies in WordPress Jetpack plugin versions = 6.4.2. Solution Update the WordPress Jetpack plugin to the latest available version at least 6.5...
Jetpack <= 6.4.2 - Authenticated Stored Cross-Site Scripting (XSS)
According to RIPS Technologies: "RIPS detected a Stored XSS vulnerability that affects a module available to premium and professional users of Jetpack. Attackers who gained control over an account on the target site with at least Contributor privileges were able to inject arbitrary JavaScript cod...
Automattic: Stored XSS in Jetpack's Simple Payment Module by Contributors / Authors
Jetpack's implementation of the Simple Payment Module is as follows: A custom post type is registered for each product. When an admin creates a product, a post is internally created and information about the product, such as the price is then stored as post meta information. After the post has be...