WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

WordPress Plugin Premium SEO Pack 1.9.1.3 - wpoptions Overwrite Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions...

WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

Wordpress Premium SEO Pack 1.9.1.3 Plugin - wp_options Overwrite

Exploit for php platform in category web applications Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Ti...

WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

Yoast SEO <= 3.2.5 - Unspecified Cross-Site Scripting (XSS)

Changelog file for version 3.3.0 states "Fixes an XSS issue, props Hristo Pandjarov."...

Uber: XSS in people.uber.com

From the HTML source code of http://people.uber.com I came to know that it uses Yoast WordPress SEO plugin v2.1.1 But it is known to suffer from XSS bug. Check it for more details and steps: https://wpvulndb.com/vulnerabilities/8045 Bug can be easily fixed upgrading the plugin. Thanks...

brafton WordPress Plugin <=3.4.7 - Reflected XSS

Title -brafton WordPress Plugin XSS Exploit Title : Vulnerabilitie XSS in brafton WordPress Plugin Date: Fri May 20 2016 Reported Date : Fri May 20 2016 Vendor Homepage: http://www.brafton.com/support/wordpress/ Version: v3.3.10 – January2016 Software Link:...

Wordpress Seo Link Rotator 插件-pusher.php文件title参数--跨站脚本漏洞

漏洞详情 漏洞标题 : Wordpress Seo Link Rotator 插件-pusher.php文件title参数--跨站脚本漏洞 插件首页 : http://www.seolinkrotator.com 下载链接 : http://www.seolinkrotator.com/download/files/seolinkrotator.zip 存在跨站漏洞的文件为pusher.php ，未做输入输出转义过滤: Link To This If you would like to share this with someone else just copy and paste th...

Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure

The Yoast SEO WordPress plugin was affected by a Subscriber Settings Sensitive Data Exposure security vulnerability...

seo-servis.cz XSS vulnerability

Vulnerable URL: http://seo-servis.cz/searching/?q=%3C/title%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61362 VIP websi...

WordPress Google SEO Pressor Snippet 1.2.6 XSS

FULL DISCLOSURE Product : Google SEO Pressor Snippet Plugin Exploit Author : Rahul Pratap Singh Version :1.2.6 Home page Link : https://wordpress.org/plugins/google-seo-author-snippets/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XS...

Google SEO Pressor Snippet <= 1.2.6 - Reflected Cross-Site Scripting (XSS)

The Google SEO Pressor for Rich snippets WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Google SEO Pressor Snippet Plugin <= 1.2.6 - Reflected XSS

This plugin is prone to a reflected cross site scripting vulnerability, because these parameters are not sanitized: "Address Region", "Longitude", "Latitude", "Event type", "Offer aggregate", "Low Price", "High Price", "Offer Url", "Price", "Events Website", "Offer Quantity", "Price valid Until",...

WordPress WP External Links 1.80 Cross Site Scripting

Document Title: =============== WP External Links v1.80 - Cross Site Scripting References Source: ====================http://www.vulnerability-lab.com/getcontent.php?id=1788 Release Date: ============= 2016-03-24 Vulnerability Laboratory ID VL-ID: ==================================== 1788 Common...

seo.jes-design.ru Open Redirect vulnerability

Vulnerable URL: http://seo.jes-design.ru/redirect.php?url=https://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 16:23 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

finishline.com XSS vulnerability

Vulnerable URL: http://www.finishline.com/jordan?icid=home-seo-copy-jordanalert'XSSPOSED'...

seo.chinakdd.com XSS vulnerability

Vulnerable URL: http://seo.chinakdd.com/talents/list--1001061001--10006--10006--2--0--1.html?classname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

freesiteworth.com Open Redirect vulnerability

Vulnerable URL: http://freesiteworth.com/seo-analyser/redirect.php?url=https://xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:36 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 6658...

dinews.ru vulnerability

Vulnerable URL: http://www.dinews.ru/seo/index.php?url=xssposed.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability status:| Publicly disclosed Alexa Rank| 183961 Google Pagerank| 2 VIP website status:| No Check dinews.ru SSL connection:| Grade: ...

WordPress SEO Rank Reporter Plugin <= 2.2.2 - Cross Site Scripting (XSS)

Because of this vulnerability, authenticated administrators can inject html or JS code. Vulnerable parameters are "keyworditem" and "entryurl". Solution Update the plugin...