WordPress Plugin Instagram Feed 1.4.6.2 - Cross-Site Request Forgery

!-- Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptingininstagramfeedpluginviacsrf.html Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF Abstract A persistent Cross-Site Scripting vulnerability was found in the Instagram Feed plugin. This issue allows an...

WordPress Canvas - Shortcodes 1.92 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Huge IT Portfolio Gallery 2.0.77 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin ------------------------------------------------------------------------ Antonis Manaras, July 2016...

ShopZilla Comparision Shopping Script 2.3 Cross Site Scripting

======================================================================== | Title : shopzilla Comparison Shopping Script v2.3 xss vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.3 | Vendor :...

WordPress Google Maps 6.3.14 Cross Site Request Forgery

------------------------------------------------------------------------ Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress Quotes Collection 2.0.5 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Quotes Collection WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Calendar 1.3.7 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Scripting in Calendar WordPress Plugin ------------------------------------------------------------------------ Remco Vermeulen, July 2016...

WordPress Calendar 1.3.7 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Calendar WordPress Plugin ------------------------------------------------------------------------ Remco Vermeulen, July 2016 ------------------------------------------------------------------------...

WordPress Caldera Forms 1.3.5.3 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Caldera Forms WordPress Plugin ------------------------------------------------------------------------ Jurgen Kloosterman, July 2016...

Codoforum 3.4 Build 19 Cross Site Scripting

======================================================================== | Title : codoforum.v.3.4.build-19 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 5.2.0 | Vendor : http://codoforum.com/ | Dork : Powered by...

Kure 0.7.1 Cross Site Scripting

======================================================================== | Title : kure-0.7.1 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 0.7.1 | Vendor :...

Simple PHP Blog 0.8.4 Cross Site Scripting

======================================================================== | Title : Simple PHP Blog 0.8.4 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 0.8.4 | Vendor : https://sourceforge.net/projects/sphpblog/ |...

Aternity version 9 vulnerable to cross-site scripting and remote code execution

Overview The Aternity webserver, version 9 and prior, is reportedly vulnerable to cross-site scripting XSS on several web pages, and remote code execution via inclusion of untrusted functionality by default due to improper authentication before execution. Description CWE-80: Improper Neutralizati...

WordPress Photo Gallery Plugin Stored Cross-Site Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the Photo Gallery plugin in WordPress version 1.8.5. The vulnerability is triggered by a...

WordPress Photo Gallery 1.8.5 Cross Site Scripting

------------------------------------------------------------------------ Stored Cross-Site Scripting vulnerability in Photo Gallery WordPress Plugin ------------------------------------------------------------------------ Umit Aksu, July 2016...

WordPress Peter's Login Redirect Plugin <= 2.9.0 - Multiple Vulnerabilities

Because of this vulnerability, the attackers can change any setting of this plugin, steal Administrators' session tokens or inject arbitrary HTML. Solution Update this plugin...

WordPress Photo Gallery by Supsystic plugin <= 1.8.5 - Cross Site Scripting (XSS)

Because of this vulnerability, the attackers can steal users' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

WordPress Store Locator Plus 4.5.09 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Store Locator Plus for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...

WordPress Count per Day 3.5.4 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an...

WordPress Plugin Count Per Day 3.5.4 - Persistent Cross-Site Scripting

Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an attacker to perform a wide variety of actions, such a...