WordPress 插件跨站脚本漏洞

WordPress is a set of blogging platform developed by Wordpress Foundation using PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Awesome Weather Widget plugin is an application plugin for WordPress. A cross-site scripting vulnerability exists in...

Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)

The plugin does not sanitize the id parameter of its awesomeweatherrefresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting XSS Vulnerability. Note WPScanTeam: The issue was reported to the WP plugins team on May 4th, 2021, then June 7th, 2021 due to lack of update...

Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)

The plugin does not sanitize the id parameter of its awesomeweatherrefresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting XSS Vulnerability. Note WPScanTeam: The issue was reported to the WP plugins team on May 4th, 2021, then June 7th, 2021 due to lack of update. PoC...

Amber Weather Widget - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Amber Weather Widget published at the 'play' market has multiple vulnerabilities...

Weather & Clock Widget Android - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather & Clock Widget Android published at the 'play' market has multiple vulnerabilities...

Neon Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Neon Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Lockscreen Weather Widget - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Lockscreen Weather Widget published at the 'play' market has multiple vulnerabilities...

Rose Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Rose Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Dessert Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Dessert Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Gold Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Gold Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Steampunk Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Steampunk Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Christmas Theme Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Theme Weather Widget published at the 'play' market has multiple vulnerabilities...

Z Style Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Z Style Weather Widget published at the 'play' market has multiple vulnerabilities...

Awesome Weather Clock Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Awesome Weather Clock Widget published at the 'play' market has multiple vulnerabilities...

YR weather widget HD - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application YR weather widget HD published at the 'play' market has multiple vulnerabilities...

Daily Live Weather Widget εїз - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Daily Live Weather Widget εїз published at the 'play' market has multiple vulnerabilities...

Clock And Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Clock And Weather Widget published at the 'play' market has multiple vulnerabilities...

Aix Weather Widget - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Aix Weather Widget published at the 'play' market has multiple vulnerabilities...

TSF Weather Widget - Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application TSF Weather Widget published at the 'play' market has multiple vulnerabilities...

Animated Weather Widget, Clock - Corrupted files, Dangerous filesystem permissions, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Animated Weather Widget, Clock published at the 'play' market has multiple vulnerabilities...