9869 matches found
CVE-2015-9408
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
CVE-2015-9407
CVE-2015-9407 affects the xpinner-lite WordPress plugin (up to version 2.2). The flaw is an XSS in xpinner-lite.php. The connected sources confirm the vulnerability vector as XSS but provide no exploit details or remediation in the cited docs.
CVE-2015-9407
The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...
PT-2019-7367
Name of the Vulnerable Software and Affected Versions xpinner-lite plugin versions through 2.2 for WordPress Description The issue concerns a CSRF vulnerability with resultant XSS in the wp-admin/options-general.php endpoint. This allows for cross-site request forgery attacks that can lead to...
CVE-2015-9407: Improper Neutralization of Input During Web Page Generation
The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...
CVE-2015-9408: Cross-Site Request Forgery (CSRF)
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
PT-2019-7366
Name of the Vulnerable Software and Affected Versions xpinner-lite plugin versions through 2.2 for WordPress Description The issue concerns an XSS in the xpinner-lite.php file. Recommendations For versions through 2.2, update to a version that contains a fix for this issue...
CVE-2016-10967
The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter...
CVE-2016-10971
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...
CVE-2016-10971
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...
CVE-2016-10966
The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload...
CVE-2016-10965
The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion...
CVE-2016-10965
The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion...
Design/Logic Flaw
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...
CVE-2016-10971
MemberSonic Lite WordPress plugin hata: vulnerability exists in versions before 1.302 where login access control is flawed—knowledge of an email suffices for authentication bypass. Affected software: MemberSonic Lite plugin for WordPress. Root cause: incorrect login access control. Impact per sou...
CVE-2016-10971
The MemberSonic Lite plugin before 1.302 for WordPress has incorrect login access control because only knowlewdge of an e-mail address is required...
CVE-2016-10967
The CVE-2016-10967 entry concerns the WordPress plugin real3d-flipbook-lite (v1.0) . The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the parameter bookId in the file path wp-content/plugins/real3d-flipbook/includes/flipbooks.php . Root cause is inadequate input handling/san...
CVE-2016-10967
The real3d-flipbook-lite plugin 1.0 for WordPress has XSS via the wp-content/plugins/real3d-flipbook/includes/flipbooks.php bookId parameter...
CVE-2016-10966
The CVE-2016-10966 entry concerns the WordPress plugin real3d-flipbook-lite version 1.0. The vulnerability is a directory traversal in the file upload process via bookName=../, enabling traversal beyond the intended directory. Details across connected documents confirm the affected product and th...
CVE-2016-10965
The CVE-2016-10965 entry concerns the real3d-flipbook-lite plugin for WordPress (version 1.0). The underlying issue is a deleteBook=../ directory traversal vulnerability that enables traversal for file deletion. Connected sources confirm the affected software and the root cause (directory travers...