EUVD-2017-9152

Malware in sbrugna...

WordPress Z-URL Preview plugin <= 1.6.2 - Cross-Site Scripting (XSS) vulnerability

A Cross-Site Scripting XSS vulnerability found by Neorichi in WordPress Z-URL Preview plugin versions = 1.6.2. Vulnerable to Cross-Site Scripting via the class.zlinkpreview.php url parameter. Solution Update the WordPress Z-URL Preview plugin to the latest available version at least 2.0.0...

CVE-2017-18012

The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter...

CVE-2017-18012: Improper Neutralization of Input During Web Page Generation

The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter...

PT-2018-6608

Name of the Vulnerable Software and Affected Versions: Z-URL Preview plugin version 1.6.1 Description: The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the url parameter in the class.zlinkpreview.php file. Recommendations: For Z-URL...