CVE-2017-9063

CVE-2017-9063 affects WordPress before 4.7.5 and is a stored XSS in the Customizer due to an invalid customization session. Impact: potential script execution in users’ browsers. remediation: upgrade WordPress to 4.7.5 or later. Notes from connected docs confirm the issue details and version boun...

CVE-2017-9063

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

CVE-2017-9063: Improper Neutralization of Input During Web Page Generation

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability related to the Customizer exists, involving an invalid customization session...

WordPress 3.4.0-4.7.4 - Customizer XSS & CSRF

...

WordPress < 4.5.3 Multiple Vulnerabilities

Binary data 9388.prm...

DEBIAN-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

UBUNTU-CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

Design/Logic Flaw

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832

CVE-2016-5832 affects WordPress prior to 4.5.3, where the customizer could be abused by remote attackers to bypass redirected navigation restrictions via unspecified vectors. Impact is bypass of redirection restrictions; no data exposure or other impacts stated in the provided documents. The issu...

CVE-2016-5832

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

CVE-2016-5832: Undefined Security Weakness

The customizer in WordPress before 4.5.3 allows remote attackers to bypass intended redirection restrictions via unspecified vectors...

WordPress Redirection Bypass Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. A redirection bypass vulnerability exists in the WordPress 4.5.2 and earlier versions of the customizer, which can be exploited by an attacker to bypass redirection...

WordPress <= 4.5.2 - BYPASS #4

The customizer allows an attacker to bypass intended redirection restrictions via unspecified vectors. Related records: http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass http://db.threatpress.com/vulnerability/wordpress/wordpress-4-5-2-bypass-1...

CVE-2016-1564

Multiple cross-site scripting XSS vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a 1 stylesheet name or 2 template name to wp-admin/customize.php...

Updated wordpress package fixes security vulnerability

The wordpress package has been updated to version 3.9.8, fixing three cross-site scripting issues CVE-2015-5732, CVE-2015-5733, CVE-2015-5734, a potential timing side-channel attack in Customizer CVe-2015-5730, an issue in Heartbeat where an attacker could lock a post from being edited...

CAINE 6.0 "Dark Matter" - Distribution with a complete forensic environment

CAINE Computer Aided INvestigative Environment is an Italian GNU/Linux live distribution created as a project of Digital Forensics. Currently the project manager is Nanni Bassetti. CAINE offers a complete forensic environment that is organized to integrate existing software tools as software...

DEBIAN-CVE-2012-3384

Cross-site request forgery CSRF vulnerability in the customizer in WordPress before 3.4.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...