ClickDesk <= 4.3 - Live Chat Widget Multiple Field XSS

The Live Chat from ClickDesk – Live Chat – Help Desk Plugin for Websites WordPress plugin was affected by a Live Chat Widget Multiple Field XSS security vulnerability...

AB Categories Search Widget 0.1 - s Parameter Reflected XSS

The AB Categories Search Widget WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...

Wise Search Widget 1.1 - s Parameter Reflected XSS

The Category Wise Search WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...

Dropdown Menu Widget 1.9.1 - Script Insertion CSRF

The Dropdown Menu Widget WordPress plugin was affected by a Script Insertion CSRF security vulnerability...

ADIF Log Search Widget - Cross-Site Scripting (XSS)

The ADIF Log Search Widget WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection

The Social Media Widget WordPress plugin was affected by a social-widget.php MITM Weakness Arbitrary Code Injection security vulnerability...

Mini Mail Dashboard Widget 1.36 - wp-mini-mail.php abspath Parameter Remote File Inclusion

The mini-mail-dashboard-widget WordPress plugin was affected by a wp-mini-mail.php abspath Parameter Remote File Inclusion security vulnerability...

jQuery Mega Menu 1.0 - Local File Inclusion

The JQuery Mega Menu Widget WordPress plugin was affected by a Local File Inclusion security vulnerability...

Advanced Text Widget <= 2.0.0 - Cross Site Scripting

The Advanced Text Widget WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Rich Widget - File Upload

The rich-widget WordPress plugin was affected by a File Upload security vulnerability...

grou-r&om-image-widget - Full Path Disclosure

The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...

WordPress Widget Control Powered Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php idDropdown parameter. Solution Update the plugin...

WordPress Flash Player Widget Plugin - Content Spoofing

This plugin is prone to a content spoofing vulnerability in dewplayer.swf. Solution Update the plugin...

Code injection

The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property...

yii -- Remote arbitrary PHP code execution

Yii PHP Framework developers report: We are releasing Yii 1.1.15 to fix a security issue found in 1.1.14. We urge all 1.1.14 users to upgrade their Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected. Upgrading to this release from 1.1.14 is...

CVE-2014-4687

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

CVE-2014-4516

The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...