EUVD-2012-5306

Malware in sbrugna...

WordPress Motors plugin <= 1.4.71 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by LVT-tholv2k in WordPress Plugin Motors versions = 1.4.71...

ALERT: Malicious Amazon Alexa Skills Can Easily Bypass Vetting Process

Researchers have uncovered gaps in Amazon's skill vetting process for the Alexa voice assistant ecosystem that could allow a malicious actor to publish a deceptive skill under any arbitrary developer name and even make backend code changes after approval to trick users into giving up sensitive...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in wlcms-plugin.php in the White Label CMS plugin before 1.5.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcmsodevelopername parameter in a save action to...

PT-2012-5969

Name of the Vulnerable Software and Affected Versions White Label CMS plugin versions prior to 1.5.1 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that modify the developer name via the wlcms o developer nam...

PT-2012-5970

Name of the Vulnerable Software and Affected Versions White Label CMS plugin version 1.5 for WordPress Description A cross-site scripting XSS issue allows remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the wlcms o developer name parameter in a sav...