WordPress WassUp Real Time Analytics Plugin <= 1.9 - Persistent XSS

Because of this vulnerability attackers can inject malicious JavaScript code into the application, which will execute within the browser of any user who views the Activity Log, in general WP admin. Solution Update the plugin...

WordPress Activity Log Plugin <= 2.3.2 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Activity Log 2.3.2 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in search function Activity Log WordPress Plugin ------------------------------------------------------------------------ Edwin Molenaar, July 2016...

Activity Log <= 2.3.2 - Cross-Site Scripting (XSS)

The Activity Log WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Activity Log Plugin <= 2.3.2 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in "page" parameter. It allows attackers to inject arbitrary JavaScript or HTML code. Solution Update the plugin...

Activity Log <= 2.3.1 - Stored Cross-Site Scripting (XSS)

The Activity Log WordPress plugin was affected by a Stored Cross-Site Scripting XSS security vulnerability...

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker ca...

WordPress Activity Log 2.3.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicio...

WordPress Activity Log Plugin 2.3.1 - Persistent XSS

Because of this vulnerability, an attacker can inject malicious JavaScript code in to the application. Solution Upgrade the WordPress plugin to the newer stable and safe version...

WordPress Activity Log 2.3.1 Persistent Cross Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicious JavaScript code into the application, which will...

WordPress Plugin Activity Log 2.3.1 - Persistent Cross-Site Scripting

Persistent Cross-Site Scripting in WordPress Activity Log plugin Han Sahin Abstract A stored Cross-Site Scripting XSS vulnerability has been found in the WordPress Activity Log plugin. By using this vulnerability an attacker can inject malicious JavaScript code into the application, which will...

WP Security Audit Log 1.5-2.4.3 - Authenticated Reflected Cross-Site Scripting (XSS)

The WP Activity Log WordPress plugin was affected by an Authenticated Reflected Cross-Site Scripting XSS security vulnerability...

HackerOne: Manipulate report timeline activity by using null byte.

Null bytes are not permitted in report body, or even in report title. But that can be used in the comment section of self-closing for reporter and change-status for team. When a null byte is used as a comment, that report timeline activity disappears! For example:...

WS-2016-7124

In “TEAMMATES/teammates”, versions V4.98 to V5.69 are vulnerable to XSS as a result of displaying non sanitized students' info in admin activity log...

Activity Log - Full Path Disclosure

The Activity Log WordPress plugin was affected by a Full Path Disclosure security vulnerability...

WordPress Activity Log Plugin <= 2.0.3 - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update the plugin...

Facebook Graph Search becomes more powerful than ever, Review your Privacy Settings again

Facebook Graph Search is more powerful than ever, has been updated to allow people to search in greater depth on Facebook. Facebook expanded its Graph Search to include posts and status updates, which means everything you've been posting is way easier to find than ever before. "Now you will be ab...

Facebook Graph Search becomes more powerful than ever, Review your Privacy Settings again

Facebook Graph Search is more powerful than ever, has been updated to allow people to search in greater depth on Facebook. Facebook expanded its Graph Search to include posts and status updates, which means everything you’ve been posting is way easier to find than ever before. "Now you will be ab...

PostgreSQL Patches DOS Vulnerability, Other Security Issues

PostgreSQL, a database management system for Linux, FreeBSD and other platforms patched a hole today that could have opened the system up to a denial-of-service DOS vulnerability in addition to a slew of other security flaws. An attacker could have leveraged the DOS vulnerability CVE-2013-0255 as...

Facebook Streamlines Privacy Controls in Latest Update

In what may be the least surprising news of the day, Facebook is again making changes to its privacy controls. The existing privacy controls, which we explored in depth in our How-To Video on the subject, are a bit convoluted. So it makes sense that product manager Samuel Lessin is rolling out so...