PT-2024-17193 · WordPress · Latex2Html

Name of the Vulnerable Software and Affected Versions: LaTeX2HTML plugin for WordPress versions up to, and including, 2.5.5 Description: The LaTeX2HTML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ver or date parameter due to insufficient input sanitization and...

CVE-2015-7517: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote attackers to execute arbitrary SQL commands via the ver parameter to 1 class-doifd-download.php or 2 class-doifd-landing-page.php in public/includes/...

CVE-2006-6457: Exposure of Sensitive Information to an Unauthorized Actor

tiki-wikirss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information MySQL username and password via an invalid large or negative ver parameter, which leaks the information in an error message...