EUVD-2017-17062

Malware in sbrugna...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

Cross site request forgery (csrf)

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

CVE-2017-8099

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request...

CVE-2017-8099

CVE-2017-8099 affects the WHIZZ WordPress plugin prior to version 1.1.1. The connected documents describe a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker delete WordPress users and change the plugin’s status via a GET request. Exploitation details beyond this behavior are ...

WordPress WHIZZ plugin <=1.1 - Cross-Site Request Forgery vulnerability

WordPress WHIZZ plugin version 1.1 and earlier versions vulnerable to Cross-Site Request Forgery type attacks. An attacker could exploit this vulnerability to delete any WordPress user and change any plugin status. Solution Update WordPress WHIZZ plugin to the latest available version at least...

Wordpress whizz plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blogging platform, the platform supports PHP and MySQL server set up a personal blog site. whizz is one of the plug-ins used in the back-end management of WordPress and add a color-coded interface . A...

CVE-2016-1000154

Reflected XSS in wordpress plugin whizz v1.0.7...

WordPress WHIZZ Plugin <= 1.0.7 - Cross Site Scripting

An unauthenticated reflected cross site scripting vulnerability is in the php code ./whizz/plugins/delete-plugin.php: 7: Solution Update the plugin...