CVE-2017-10889

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity XXE attacks via unspecified vectors...

CVE-2017-10889

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity XXE attacks via unspecified vectors...

CVE-2017-10889

CVE-2017-10889 concerns the WordPress TablePress plugin. Multiple connected sources confirm that TablePress versions prior to 1.8.1 are vulnerable to an XML External Entity (XXE) attack due to XML entities not being properly restricted (CWE-611). The vulnerability can allow an attacker to access ...

CVE-2017-10889

TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity XXE attacks via unspecified vectors...

WordPress TablePress XML Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.TablePress is a plugin used in WordPress to create and manage tables. An XML injection vulnerability exists in WordPress...

WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references

Overview The WordPress plugin "TablePress" is a plugin to create and manage tables on WordPress site. TablePress contains a vulnerability where XML external entity XXE references are not properly restricted CWE-611. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA...

JVN#05398317: WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references

The WordPress plugin "TablePress" is a plugin to create and manage tables on WordPress site. TablePress contains a vulnerability where XML external entity XXE references are not properly restricted CWE-611. Impact An arbitrary file on the server may be accessed by users who can access the...

TablePress <= 1.8 - Authenticated XML External Entity (XXE)

The TablePress WordPress plugin was affected by an Authenticated XML External Entity XXE security vulnerability...