EUVD-2014-4453

Malware in sbrugna...

CVE-2014-4526

Multiple cross-site scripting XSS vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 message, 2 zoneid, 3 pubKey, or 4 privKey parameter...

CVE-2014-4526

Summary (CVE-2014-4526) : The WordPress plugin efence (versions up to and including 1.3.2) is affected by multiple XSS vulnerabilities in callback.php. The attack surface includes parameters: message, zoneid, pubKey, and privKey, enabling remote attackers to inject arbitrary web script/HTML. The ...

WordPress Efence Plugin <= 1.3.2 - Multiple XSS

Because of these vulnerabilities in callback.php, the attackers can inject arbitrary web script or HTML. Solution Update the plugin...