CVE-2015-1366

CVE-2015-1366 concerns a Cross-Site Scripting vulnerability in the WordPress plugin “Pixabay Images” (pixabay-images.php) prior to version 2.4. The flaw allows remote attackers to inject arbitrary web script or HTML through the image_user parameter, due to insufficient input sanitization. Affecte...

MSA-2015-01: Wordpress Plugin Pixabay Images Multiple Vulnerabilities

Mogwai Security Advisory MSA-2015-01 ---------------------------------------------------------------------- Title: WP Pixarbay Images Multiple Vulnerabilities Product: Pixarbay Images Wordpress Plugin Affected versions: 2.3 Impact: high Remote: yes Product link:...

WordPress Plugin Pixarbay Images 2.3 - Multiple Vulnerabilities

Mogwai Security Advisory MSA-2015-01 ---------------------------------------------------------------------- Title: WP Pixarbay Images Multiple Vulnerabilities Product: Pixarbay Images Wordpress Plugin Affected versions: 2.3 Impact: high Remote: yes Product link:...

WordPress Pixabay Images Plugin 2.3 - Multiple Vulnerabilities

WordPress Pixarbay Images plugin is prone to multiple vulnerabilities, such as authentication bypass, arbitrary file upload, path traversal and cross-site scripting XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Pixabay Images PHP Code Upload

This module exploits multiple vulnerabilities in the WordPress plugin Pixabay Images 2.3.6. The plugin does not check the host of a provided download URL which can be used to store and execute malicious PHP code on the system. Module Options msf use exploit/unix/webapp/wp/pixabayimagesupload msf...