EUVD-2015-9205

Malware in sbrugna...

CVE-2015-9365

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

WordPress iThemes Exchange Authorize.net Add-on Cross-Site Scripting Vulnerability

iThemes Exchange for WordPress is a plugin for creating e-commerce sites using the WordPress content management system. authorize.net Add-on is one of the Authorize Payment Gateway plugins. A cross-site scripting vulnerability exists in WordPress iThemes Exchange Authorize.net Add-on. An attacker...

CVE-2015-9365

The CVE-2015-9365 entry concerns the WordPress plugin component: Authorize.net Add-on for iThemes Exchange, affected on versions before 1.1.0. The vulnerability is a cross-site scripting (XSS) issue exploitable via add_query_arg() and remove_query_arg(), as described in multiple sources (NVD entr...