CVE-2016-10919

The vulnerability CVE-2016-10919 affects the WordPress WassUp Real Time Analytics plugin (versions before 1.9.1). It allows stored or reflected XSS via the Top stats widget or the wassupURI::add_siteurl method, enabling an attacker to inject arbitrary script when the affected plugin renders conte...

CVE-2016-10919: Improper Neutralization of Input During Web Page Generation

The wassup plugin before 1.9.1 for WordPress has XSS via the Top stats widget or the wassupURI::addsiteurl method, a different vulnerability than CVE-2012-2633...

WordPress WassUp Real Time Analytics 1.9 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in WassUp Real Time Analytics WordPress Plugin ------------------------------------------------------------------------ Burak Kelebek, October 2016...

WordPress WassUp Real Time Analytics 1.9 Plugin - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptinginwassuprealtimeanalyticswordpressplugin.html Persistent Cross-Site Scripting in WassUp Real Time Analytics WordPress Plugin Abstract A stored Cross-Site Scripting XSS...

WordPress WassUp Real Time Analytics Plugin <= 1.9 - Persistent XSS

Because of this vulnerability attackers can inject malicious JavaScript code into the application, which will execute within the browser of any user who views the Activity Log, in general WP admin. Solution Update the plugin...

WordPress Plugin WassUp Real Time Analytics 1.9 - Persistent Cross-Site Scripting

Source: https://sumofpwn.nl/advisory/2016/persistentcrosssitescriptinginwassuprealtimeanalyticswordpressplugin.html Persistent Cross-Site Scripting in WassUp Real Time Analytics WordPress Plugin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WassUp Real Time...

CVE-2012-2633

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2012-2633

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

CVE-2012-2633

The CVE-2012-2633 entry concerns a Cross-site scripting (XSS) vulnerability in the WassUp WordPress plugin, specifically in wassup.php, allowing an attacker to inject arbitrary script/HTML via the User-Agent header. Affected versions are WassUp for WordPress before 1.8.3.1. Mitigation noted in so...

CVE-2012-2633: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wassup.php in the WassUp plugin before 1.8.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header...

WordPress plugin WassUp vulnerable to cross-site scripting

Overview The WordPress plugin WassUp contains a cross-site scripting vulnerability. WassUp is a WordPress plugin that tracks visitors to the blog. WassUp contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the...

JVN#15646988: WordPress plugin WassUp vulnerable to cross-site scripting

WassUp is a WordPress plugin that tracks visitors to the blog. WassUp contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the...

Wassup < 1.8.3.1 - XSS

The WassUp Real Time Analytics WordPress plugin was affected by a XSS security vulnerability...

WordPress WassUp Plugin <= 1.8.3.0 - XSS

Because of this vulnerability in wassup.php, the attackers can inject arbitrary web script or HTML via the User-Agent HTTP header. Solution Update the plugin...

WordPress WassUp插件spy.php脚本远程SQL注入漏洞

BUGTRAQ ID: 27525 WordPress是一款免费的论坛Blog系统。 WordPress的WassUp插件存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 WordPress的WassUp插件中spy.php文件没有正确地验证对todate参数的输入： if isset$GET'todate' $todate = htmlentitiesstriptags$GET'todate'; ........... spyview$fromdate,$todate,$rows; -In main.php function spyview...

Sql injection

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

CVE-2008-0520

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

CVE-2008-0520

The CVE-2008-0520 entry describes SQL injection vulnerabilities in the WassUp WordPress plugin (versions 1.4–1.4.3), specifically in main.php where the spy.php script accepts from_date and to_date parameters. The affected component is the WassUp plugin for WordPress; the underlying issue allows r...

WordPress WassUp Plugin <= 1.4.3 - Multiple SQL Injection

Because of these vulnerabilities in main.php, the attackers can execute arbitrary SQL commands. Solution Update the plugin...