WordPress Portfolio Plugin <= 2.1.10 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Upgrade the plugin...

WordPress Portfolio Plugin <= 1.3.47 - Multiple XSS

These vulnerabilities allow an authenticated user to inject arbitrary web script or HTML via the 1. Media Title or 2. Media Subtitle fields. Solution Update the plugin...

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

CVE-2015-6523

The CVE-2015-6523 entry concerns the WordPress Portfolio plugin prior to version 1.05, where a Cross-Site Request Forgery (CSRF) flaw in the instagram-portfolio page of wp-admin/options-general.php allows remote attackers to hijack administrator authentication. The vulnerability arises from the p...

PT-2015-7286

Name of the Vulnerable Software and Affected Versions Portfolio plugin for WordPress versions prior to 1.05 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests with unspecified impact. This is achieved via a reque...

WordPress Portfolio 'options-general.php' plugin cross-site forgery vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Portfolio is one of the product showcase plugin. A cross-site forgery vulnerability in the WordPress Portfolio...

WordPress Portfolio 1.0 Cross Site Request Forgery

Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL: https://wordpress.org/plugins/portfolio-by-lisa-westlund/ Vulnerability Type: Cross-site Request Forgery CWE-352 Affected...

WordPress Portfolio 1.0 Cross Site Request Forgery Vulnerability

WordPress Portfolio plugin version 1.0 suffers from a cross site request forgery vulnerability. Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL:...

Portfolio 1.0 - Cross-Site Request Forgery (CSRF)

The Portfolio Plugin WordPress plugin was affected by a Cross-Site Request Forgery CSRF security vulnerability...

Design/Logic Flaw

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback...

CVE-2012-5479

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback...

CVE-2012-5479

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback...

CVE-2012-5479

The CVE concerns the Moodle Portfolio plugin. Affected releases are Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3. The vulnerability allows remote authenticated users to upload and execute files via a modified Portfolio API callback. This results in arbitrary code executio...

PT-2012-5990

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.x through 2.1.8 Moodle versions 2.2.x through 2.2.5 Moodle versions 2.3.x through 2.3.2 Description The issue allows remote authenticated users to upload and execute files via a modified Portfolio API callback. This is...

CVE-2012-5479: Undefined Security Weakness

The Portfolio plugin in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to upload and execute files via a modified Portfolio API callback...