EUVD-2015-9272

Malware in sbrugna...

WordPress alpine-photo-tile-for-instagram plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. alpine-photo-tile-for-instagram is a plugin used in it to retrieve photos or hashtags of specific Instagram users. A...

Cross site request forgery (csrf)

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...

CVE-2015-9432

The vulnerability CVE-2015-9432 affects the WordPress plugin alpine-photo-tile-for-instagram, specifically versions prior to 1.2.7.6. It enables a cross-site scripting (XSS) condition that can result from a CSRF flaw via the plugin’s settings page (wp-admin/options-general.php?page=alpine-photo-t...