WordPress Simple Share Buttons Adder 4.4 CSRF / XSS

Details ================ Software: Simple Share Buttons Adder Version: 4.4 Homepage: https://wordpress.org/plugins/simple-share-buttons-adder/ Advisory report: https://security.dxw.com/advisories/csrf-and-stored-xss-in-simple-share-buttons-adder/ CVE: Awaiting assignment CVSS: 5.8 Medium;...

WordPress Featured Comments 1.2.1 Cross Site Request Forgery

Details ================ Software: Featured Comments Version: 1.2.1 Homepage: http://wordpress.org/plugins/feature-comments/ Advisory ID: dxw-2014-1360 CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CSRF in Featured Comments 1.2.1 allows an...

WordPress JW Player 2.1.2 Cross Site Request Forgery

Details ================ Software: JW Player for Flash & HTML5 Video Version: 2.1.2 Homepage: http://wordpress.org/plugins/jw-player-plugin-for-wordpress/ Advisory ID: dxw-1970-1201 CVE: Awaiting assignment CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:N/A:P Description ================ CSRF in JW Playe...

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS...

WordPress Plugin Quick PagePost Redirect 5.0.3 - Multiple Vulnerabilities

WordPress Plugin Quick PagePost Redirect 5.0.3 - Multiple Vulnerabilities Details ================ Software: Quick Page/Post Redirect Plugin Version: 5.0.3 Homepage: http://wordpress.org/plugins/quick-pagepost-redirect-plugin/ Advisory ID: dxw-1970-1091 CVE: CVE-2014-2598 CVSS: 6.8 Medium;...

WordPress Plugin Twitget 3.3.1 - Multiple Vulnerabilities

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...

Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Twitget version 3.3.1 suffers from cross site request forgery and cross site scripting vulnerabilities. Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A...

Twitget 3.3.1 Cross Site Request Forgery / Cross Site Scripting

Details ================ Software: Twitget Version: 3.3.1 Homepage: http://wordpress.org/plugins/twitget/ Advisory ID: dxw-1970-435 CVE: CVE-2014-2559 CVSS: 6.4 Medium; AV:N/AC:L/Au:N/C:P/I:P/A:N Description ================ CSRF/XSS vulnerability in Twitget 3.3.1 Vulnerability ================ I...

WordPress Quick Page/Post Redirect Plugin 5.0.3 CSRF / XSS

Details ================ Software: Quick Page/Post Redirect Plugin Version: 5.0.3 Homepage: http://wordpress.org/plugins/quick-pagepost-redirect-plugin/ Advisory ID: dxw-1970-1091 CVE: CVE-2014-2598 CVSS: 6.8 Medium; AV:N/AC:M/Au:N/C:P/I:P/A:P Description ================ CSRF and stored XSS in...

Wordpress Ajax Pagination Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file...

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion

Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file inclusion vulnerability in Ajax Pagination twitter Style 1....

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion

WordPress Plugin Ajax Pagination 1.1 - Local File Inclusion Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file...

Ajax Pagination 1.1 Local File Inclusion

Details ================ Software: Ajax Pagination twitter Style Version: 1.1 Homepage: http://wordpress.org/plugins/ajax-pagination/ CVSS: 9.3 High; AV:N/AC:M/Au:N/C:C/I:C/A:C Description ================ End-user exploitable local file inclusion vulnerability in Ajax Pagination twitter Style 1....

WordPress HTML Sitemap 1.2 Cross Site Request Forgery

Details ================ Software: WP HTML Sitemap Version: 1.2 Homepage: http://wordpress.org/plugins/wp-html-sitemap/ CVSS: 4.3 Medium; AV:N/AC:M/Au:N/C:N/I:P/A:N Description ================ CSRF vulnerability in WP HTML Sitemap 1.2 Vulnerability ================ A CSRF vulnerability exists...

GD Star Rating 1.9.22 XSS / CSRF / SQL Injection

Details ================ Software: GD Star Rating Version: 1.9.22 Homepage: http://wordpress.org/plugins/gd-star-rating/ CVSS: 8.5 High; AV:N/AC:L/Au:S/C:C/I:N/A:C Description ================ XSS, CSRF and blind SQL injection in GD Star Rating 1.9.22 Vulnerability ================ This plugin is...