Lucene search
+L

293 matches found

WPVulnDB
WPVulnDB
•added 2015/07/26 12:00 a.m.•24 views

WP Slimstat <= 4.1.5.2 - Referer Header Cross-Site Scripting (XSS)

The Slimstat Analytics WordPress plugin was affected by a Referer Header Cross-Site Scripting XSS security vulnerability...

4.3CVSS1.1AI score0.0133EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2015/07/26 12:00 a.m.•18 views

WordPress Slimstat Plugin <= 4.1.5.2 - Cross Site Scripting

This plugin is prone to a referer header cross site scripting vulnerability. Solution Update the plugin...

1.2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•8 views

WordPress SlimStat Plugin <= 2.8.4 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via wp-content/plugins/wp-slimstat/admin/view/panel1.php s parameter. Solution Update the plugin...

2.8AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•21 views

WordPress Slimstat Plugin <= 3.9.5 - SQL Injections

This plugin is prone to weak cryptographic keys leading to SQL injections. Solution Update the plugin...

2.7AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•13 views

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

2.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2015/05/15 12:00 a.m.•15 views

WordPress SlimStat Ex Plugin - Arbitrary File Creation

This plugin is prone to an open flash chart arbitrary file creation vulnerability. Solution Update the plugin...

2.1AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2015/02/28 12:00 a.m.•35 views

WordPress plugin WP Slimstat 'wp-admin/admin.php' cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in the WordPress plugin WP Slimstat 'wp-admin/admin.php', which can be exploited by an attacker ...

4.3CVSS6.7AI score0.02346EPSS
SaveExploits1References1
myhack58
myhack58
•added 2015/02/26 12:00 a.m.•26 views

Popular Wordpress Analytics plugins-WP-Slimstat weak key and the sql injection vulnerability analysis-vulnerability warning-the black bar safety net

! /Article/UploadPic/2015-2/2 0 1 5 2 2 6 1 1 4 2 5 0 6 4 5. png Web Security enterprise Sucuri Tuesday in a blog post said that they in the latest version of Wordpress Analytics plugins-WP-Slimstat found in asql injectionvulnerabilities, exploit the vulnerability, an attacker can perform sql bli...

2.1AI score
SaveExploits0
CNVD
CNVD
•added 2015/02/26 12:00 a.m.•6 views

WordPress Plugin WP Slimstat Weak Encryption Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A weak encryption vulnerability exists in the WordPress plugin WP Slimstat, allowing attackers to obtain sensitive information...

6.5AI score
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2015/02/26 12:00 a.m.•7 views

WordPress Slimstat Plugin SQL Injection

An SQL injection vulnerability has been reported in Wordpress Slimstat Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

4.8AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2015/02/25 1:22 p.m.•13 views

WordPress Sites Vulnerable to Plugin-Related SQL Attacks

More than one million WordPress sites may be vulnerable to a critical plugin issue that could open sites up to SQL injection attacks and in turn, total takeover. The problem stems from a weak key vulnerability in WP-Slimstat, a web analytics plugin for the content management system that’s been...

SaveExploits0References4
The Hacker News
The Hacker News
•added 2015/02/25 12:20 a.m.•11 views

WordPress Analytics Plugin Leaves 1.3 Million Sites Vulnerable to Hackers

A critical vulnerability has been discovered in one of the most popular plugins of the the WordPress content management platform that puts more than one Million websites at risks of being completely hijacked by the attackers. The vulnerability actually resides in most versions of a WordPress plug...

7.7AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2015/02/24 12:00 a.m.•18 views

WP Slimstat <= 3.9.5 - Weak Cryptographic Keys Leading to SQL Injections

The Slimstat Analytics WordPress plugin was affected by a Weak Cryptographic Keys Leading to SQL Injections security vulnerability...

2.2AI score
SaveExploits0References2Affected Software1
NVD
NVD
•added 2015/01/21 3:28 p.m.•29 views

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

4.3CVSS5.8AI score0.02346EPSS
SaveExploits1References3
Prion
Prion
•added 2015/01/21 3:28 p.m.•18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

4.3CVSS6.3AI score0.02346EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2015/01/21 3:00 p.m.•3 views

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

6.3CVSS0.02346EPSS
SaveExploits1References3
CVE
CVE
•added 2015/01/21 3:00 p.m.•52 views

CVE-2015-1204

Summary: WP Slimstat for WordPress is affected by a Cross-Site Scripting (XSS) vulnerability in the Save Filters functionality. The issue allows an attacker to inject arbitrary script or HTML via the fs[resource] parameter on the wp-slim-view-2 page (to wp-admin/admin.php). Affected versions: bef...

4.3CVSS6AI score0.02346EPSS
SaveExploits1References3Affected Software1
Patchstack
Patchstack
•added 2015/01/21 12:00 a.m.•33 views

WordPress Slimstat Plugin <= 3.9.1 - XSS

This vulnerability is in the Save Filters functionality. It allows the attackers to inject arbitrary web script or HTML via the "fsresource" parameter. Solution Update the plugin...

4.3CVSS3.7AI score0.02346EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2015/01/21 12:00 a.m.•4 views

PT-2015-5162

Name of the Vulnerable Software and Affected Versions WP Slimstat plugin versions prior to 3.9.2 Description A cross-site scripting XSS issue exists in the Save Filters functionality of the WP Slimstat plugin. This allows remote attackers to inject arbitrary web script or HTML via the fsresource...

4.3CVSS0.02346EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/21 12:00 a.m.•8 views

CVE-2015-1204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

4.3CVSS6AI score0.02346EPSS
SaveExploits1References2
Rows per page
Query Builder