CVE-2019-15321: Deserialization of Untrusted Data

The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled...

PT-2019-14050

Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.7.3 Description The issue is related to Object Injection due to the mishandling of serialized classes. Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to resolve the issue...

PT-2019-14048

Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.7.0 Description The issue allows for Object Injection by leveraging a valid nonce. Recommendations For versions prior to 2.7.0, update to version 2.7.0 or later to resolve the issue...

CVE-2019-15320: Deserialization of Untrusted Data

The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled...

WordPress option-tree plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. option-tree is used in one of the theme selection building plugin. A cross-site scripting vulnerability exists in WordPress...

PT-2019-14049

Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.7.3 Description The issue is related to Object Injection due to the mishandling of the + character. Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to resolve the issue...

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...

CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to addqueryarg...

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...

Design/Logic Flaw

The option-tree plugin before 2.5.4 for WordPress has XSS related to addqueryarg...

CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to addqueryarg...

CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to addqueryarg...

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...

PT-2019-7279 · WordPress · Option-Tree

Name of the Vulnerable Software and Affected Versions: option-tree plugin versions prior to 2.5.4 Description: The issue is related to a Cross-Site Scripting XSS problem in the add query arg function. Recommendations: For versions prior to 2.5.4, update to version 2.5.4 or later to resolve the...

CVE-2016-10895: Improper Neutralization of Input During Web Page Generation

The option-tree plugin before 2.6.0 for WordPress has XSS via an addlistitem or addsociallinks AJAX request...

PT-2019-7691

Name of the Vulnerable Software and Affected Versions option-tree plugin versions prior to 2.6.0 Description The issue allows for XSS via an add list item or add social links AJAX request. Recommendations For option-tree plugin versions prior to 2.6.0, update to version 2.6.0 or later to resolve...

CVE-2015-9320: Improper Neutralization of Input During Web Page Generation

The option-tree plugin before 2.5.4 for WordPress has XSS related to addqueryarg...

Recommended update for dkgpg, libTMCG (moderate)

openSUSE Security Update: Recommended update for dkgpg, libTMCG Announcement ID: openSUSE-SU-2019:1951-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that contains security fixes can now be installed. Description: This update for dkgpg, libTMCG...

U.S. Dept Of Defense: Examples directory is PUBLIC on https://████████mil, leading to multiple vulns

Description: Hello, In an effort to consolidate reporting. I have located 4 issues with having the Examples Directory openmy require just 1 solution to mitigate The following URLs that show concern are the following: 1. https://█████mil/examples/servlets/servlet/SessionExample --Will lead to...