CVE-2018-5368

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

CVE-2018-5369: Improper Neutralization of Input During Web Page Generation

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a langidentificator parameter...

PT-2018-17066

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue exists in the read-and-understood plugin for WordPress, where cross-site scripting XSS is possible. This occurs via the "wp-admin/options-general.php" endpoint, specifically...

CVE-2018-5368: Cross-Site Request Forgery (CSRF)

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

PT-2018-16925

Name of the Vulnerable Software and Affected Versions SrbTransLatin plugin version 1.46 Description The issue concerns a CSRF vulnerability. It can be exploited via an srbtranslatoptions action to the "/wp-admin/options-general.php" API endpoint. Recommendations For SrbTransLatin plugin version...

PT-2018-16926

Name of the Vulnerable Software and Affected Versions SrbTransLatin plugin version 1.46 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by sending a specific request to the "wp-admin/options-general.php" endpoint with a lang...

WordPress ImageInject plugin 1.15 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability found by wpl0v3r in WordPress ImageInject plugin version 1.15. Vulnerable via wp-admin/options-general.php. Solution 1/9/2018 - we were unable to find a patched version of the plugin. Dangerous to use...

WordPress ImageInject plugin 1.15 - Stored Cross-Site Scripting vulnerability

Stored Cross-Site Scripting vulnerability found by wpl0v3r in WordPress ImageInject plugin version 1.15. Vulnerable via the flickrappid parameter to wp-admin/options-general.php. Solution 1/9/2018 - we were unable to find a patched version of the plugin. Dangerous to use...

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

Cross site request forgery (csrf)

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

Design/Logic Flaw

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-5284

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

CVE-2018-5284

CVE-2018-5284 affects the WordPress plugin ImageInject, version 1.15. The vulnerability is a stored cross-site scripting (XSS) via the flickr_appid parameter on wp-admin/options-general.php. Root cause is input handling insufficient to neutralize script payloads in this parameter. Documented impa...

CVE-2018-5285

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-5285: Cross-Site Request Forgery (CSRF)

The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-5284: Improper Neutralization of Input During Web Page Generation

The ImageInject plugin 1.15 for WordPress has XSS via the flickrappid parameter to wp-admin/options-general.php...

PT-2018-16865

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 Description The issue allows for XSS via the flickr appid parameter to the "/wp-admin/options-general.php" API endpoint. Recommendations For ImageInject plugin version 1.15, avoid using the flickr appid paramete...

PT-2018-16866

Name of the Vulnerable Software and Affected Versions ImageInject plugin version 1.15 for WordPress Description The issue concerns a CSRF vulnerability. It affects the wp-admin/options-general.php API endpoint. Recommendations For ImageInject plugin version 1.15, consider disabling access to the...