PT-2018-17565

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS id parameter to "wp-admin/options-general.php" API endpoint. Recommendations For flickrRSS...

CVE-2018-6466: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSset parameter to wp-admin/options-general.php...

PT-2018-17563

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS set parameter to "wp-admin/options-general.php". Recommendations For version 5.3.1, consid...

PT-2018-17564

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description The issue concerns a CSRF problem. It affects the "wp-admin/options-general.php" API endpoint. Recommendations For flickrRSS plugin version 5.3.1, consider restricting access to the...

CVE-2018-6469: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...

CVE-2018-6467: Cross-Site Request Forgery (CSRF)

The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php...

CVE-2018-6468: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSid parameter to wp-admin/options-general.php...

PT-2018-17566

Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS tags parameter to "wp-admin/options-general.php". Recommendations For version 5.3.1, avoid...

Cross site request forgery (csrf)

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...

CVE-2018-5668

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...

CVE-2018-5667: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...

PT-2018-17067

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue was found in the read-and-understood plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the rnu username validation title parameter in the...

CVE-2018-5667

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...

CVE-2018-5669: Cross-Site Request Forgery (CSRF)

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...

CVE-2018-5669

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...

CVE-2018-5668: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...

PT-2018-17068

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue exists in the read-and-understood plugin for WordPress, where a CSRF vulnerability is present via the "wp-admin/options-general.php" API endpoint. Recommendations: For...

CVE-2018-5668

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...

CVE-2018-5368

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

CVE-2018-5369

The SrbTransLatin plugin 1.46 for WordPress is affected by CVE-2018-5369: a Cross-Site Scripting (XSS) vulnerability via the srbtranslatoptions action to wp-admin/options-general.php with the lang_identificator parameter. This, as documented, can allow injection of arbitrary web script or HTML. S...