EUVD-2016-1955

Malware in sbrugna...

CVE-2016-10964

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header...

Design/Logic Flaw

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header...

CVE-2016-10964

CVE-2016-10964 affects the WordPress dwnldr plugin, versions before 1.01. The vulnerability is an XSS via the User-Agent HTTP header in the download handling logic. Public records include an unauthenticated stored XSS PoC and advisories noting the issue. Impact, as stated, is script execution whe...

CVE-2016-10964

The dwnldr plugin before 1.01 for WordPress has XSS via the User-Agent HTTP header...

WordPress Dwnldr Plugin <= 1.0 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...