3399 matches found
PT-2019-13837 · WordPress · Wp Google Maps
Name of the Vulnerable Software and Affected Versions: WP Google Maps plugin versions prior to 7.11.35 Description: The issue allows for XSS attacks via the "wp-admin/" endpoint, specifically through the rectangle name or rectangle opacity parameters. Recommendations: For versions prior to 7.11.3...
CVE-2019-14792: Improper Neutralization of Input During Web Page Generation
The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectanglename or rectangleopacity parameter...
Security update for teeworlds (moderate)
openSUSE Security Update: Security update for teeworlds Announcement ID: openSUSE-SU-2019:1793-1 Rating: moderate References: 1112910 1131729 Cross-References: CVE-2018-18541 CVE-2019-10877 CVE-2019-10878 CVE-2019-10879 Affected Products: openSUSE Leap 15.1 An update that fixes four vulnerabiliti...
WordPress HTML5 Maps plugin <= 1.6.5.6 - Cross-Site Request Forgery CSRF and Cross-Site Scripting (XSS) vulnerabilities
Cross-Site Request Forgery CSRF and Cross-Site Scripting XSS vulnerabilities found by Cryptography Laboratory in WordPress HTML5 Maps plugin versions = 1.6.5.6. Solution Update the WordPress HTML5 Maps plugin to the latest available version at least 1.6.5.7...
WordPress WP Google Maps plugin <= 7.11.34 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found in WordPress WP Google Maps plugin versions = 7.11.34. Solution Update the WordPress WP Google Maps plugin to the latest available version at least 7.11.35...
WP Google Maps <= 7.11.34 - CSRF to Stored XSS
Lack of CSRF and authorisation checks, as well as sanitisation in the wpgmapshead function in legacy-core.php can lead to stored XSS issues...
CVE-2019-5983
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5983
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-5983
CVE-2019-5983 applies to the WordPress HTML5 Maps plugin (versions
CVE-2019-5983
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
PT-2019-17917 · Unknown · Html5 Maps
Name of the Vulnerable Software and Affected Versions: HTML5 Maps versions 1.6.5.6 and earlier Description: A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations: For versions 1.6.5.6 and earlier,...
CVE-2019-5983: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in HTML5 Maps 1.6.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
WordPress Google Maps Plugin SQL Injection (CVE-2019-10692)
An SQL injection vulnerability exists in the WordPress Google Maps Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress Plugin "HTML5 Maps" vulnerable to cross-site request forgery
Overview WordPress Plugin "HTML5 Maps" provided by Fla-Shop.com contains a cross-site request forgery vulnerability CWE-352. Daisuke Shimizu of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported this vulnerability to the...
WordPress HTML5 Maps Plugin Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.HTML5 Maps plugin is an interactive maps plugin used in it. Cross-site request forgery vulnerability exists in WordPress HTML5 Maps...
JVN#49575131: WordPress Plugin ”HTML5 Maps” vulnerable to cross-site request forgery
WordPress Plugin ”HTML5 Maps” provided by Fla-Shop.com contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information provided b...
HTML5 Maps <= 1.6.5.6 - CSRF & XSS
The HTML5 Maps WordPress plugin was affected by a CSRF & XSS security vulnerability...
WordPress WP Google Maps plugin <= 7.11.27 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found in WordPress WP Google Maps plugin versions = 7.11.27. Solution Update the WordPress WP Google Maps plugin to the latest available version at least 7.11.28...