401 matches found
CVE-2013-3476: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors...
CVE-2014-3937: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2014-2623
Name of the Vulnerable Software and Affected Versions Contextual Related Posts plugin versions prior to 1.8.7 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks...
WordPress Contextual Related Posts Plugin <= 1.8.10.1 - SQL Injection
Because of this vulnerability, the attackers can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...
PT-2014-2678
Name of the Vulnerable Software and Affected Versions WordPress Related Posts plugin versions prior to 2.6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that change settings. Recommendations For versions prior to 2.6.2,...
PT-2014-2666
Name of the Vulnerable Software and Affected Versions Related Posts plugin versions prior to 2.7.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify settings. Recommendations For versions prior to 2.7.2, update to...
CVE-2013-3257: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors...
PT-2014-5617
Name of the Vulnerable Software and Affected Versions Contextual Related Posts plugin versions prior to 1.8.10.2 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.8.10.2, update to version 1.8.10.2 or later to resolve the issu...
CVE-2013-3477
The CVE-2013-3477 vulnerability is a CSRF flaw in the WordPress plugin Related Posts by Zemanta up to version 1.3.1/1.3.1 (and before 1.3.2), allowing remote attackers to hijack user authentication and change settings via unknown vectors. Affected component: Related Posts by Zemanta plugin; impac...
CVE-2013-3477: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors...
WordPress Related Posts Plugin <= 1.3.1 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of unspecified users for requests that change settings via unknown vectors. Solution Update the plugin...
WordPress Related Posts Plugin <= 2.6.1 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of users for requests that change settings via unspecified vectors. Solution Update the plugin...
WordPress Related Posts Plugin <= 2.7.1 - CSRF
Because of this vulnerability, the attackers can hijack the authentication of users for requests that modify settings via unspecified vectors. Solution Update the plugin...
CVE-2011-0760
Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...
CVE-2011-0760
Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...
CVE-2011-0760
CVE-2011-0760 affects the WP Related Posts WordPress plugin (version 1.0). The vulnerability is a cross-site request forgery (CSRF) in the plugin’s configuration screen, enabling remote attackers to hijack administrator sessions and inject cross-site scripting (XSS) via the parameters wp_relatedp...
PT-2011-2615
Name of the Vulnerable Software and Affected Versions WP Related Posts plugin version 1.0 Description The issue affects the configuration screen in wp-relatedposts.php, where multiple cross-site request forgery CSRF vulnerabilities exist. These vulnerabilities allow remote attackers to hijack the...
CVE-2011-0760: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting XSS sequences via the 1...
