239 matches found
CVE-2018-5656
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...
Design/Logic Flaw
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREEAccessToken parameter...
CVE-2018-5655
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
CVE-2018-5653
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizarpffreesettingssaveget-users parameter...
CVE-2018-5656
CVE-2018-5656 concerns the WordPress plugin weblizar-pinterest-feeds (version 1.1.1). The connected documents specify a Cross-Site Request Forgery (CSRF) vulnerability via wp-admin/admin-ajax.php, affecting this plugin. The CVE entry identifies the issue and its risk metrics (NVD lists CVSS v3 ba...
CVE-2018-5655
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
CVE-2018-5653
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizarpffreesettingssaveget-users parameter...
CVE-2018-5653
The CVE-2018-5653 entry refers to a vulnerability in the WordPress plugin weblizar-pinterest-feeds version 1.1.1. The issue is an XSS vulnerability exploitable via the wp-admin/admin-ajax.php parameter weblizar_pffree_settings_save_get-users. Several connected sources (CNVD-2018-01274 and WPVulnD...
CVE-2018-5656
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...
CVE-2018-5655
The CVE-2018-5655 entry concerns the WordPress plugin weblizar-pinterest-feeds (v1.1.1). The vulnerability is an XSS in the wp-admin/admin-ajax.php security parameter. Affected component is the plugin’s handling of the admin-ajax requests; the exact root cause is not elaborated beyond “XSS exists...
CVE-2018-5654
CVE-2018-5654 concerns the WordPress plugin weblizar-pinterest-feeds (version 1.1.1). The issue is a cross-site scripting (XSS) vulnerability exploitable through the wp-admin/admin-ajax.php endpoint via the PFFREE_Access_Token parameter. All connected sources identify an XSS in this plugin, with ...
CVE-2018-5656: Cross-Site Request Forgery (CSRF)
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...
CVE-2018-5654: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREEAccessToken parameter...
CVE-2018-5654
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php PFFREEAccessToken parameter...
CVE-2018-5655: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...
CVE-2018-5653: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizarpffreesettingssaveget-users parameter...
Pinterest Feed <= 1.1.1 - Authenticated XSS & CSRF
The Weblizar Pin Feeds WordPress plugin was affected by an Authenticated XSS & CSRF security vulnerability...
WordPress Pinterest Badge 1.8.0 Cross Site Scripting Vulnerability
Exploit for php platform in category web applications Credit Ricardo Sanchez Vulnerable Pinterest Badge 1.8.0 Pinterest Badge is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...
WordPress Pinterest Badge 1.8.0 Cross Site Scripting
Class Input Validation Error Remote Yes Credit Ricardo Sanchez Vulnerable Pinterest Badge 1.8.0 Pinterest Badge is prone to a stored cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script cod...
ct.pinterest.com Open Redirect vulnerability
Vulnerable URL: https://ct.pinterest.com///redirect/?userid=522980712886972779=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...