EUVD-2015-9237

Malware in sbrugna...

EUVD-2015-9238

Malware in sbrugna...

CVE-2015-9398

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection...

CVE-2015-9397

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9397

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9398

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection...

Sql injection

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection...

Cross site scripting

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9398

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection...

CVE-2015-9397

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9397

CVE-2015-9397 affects the GoCodes WordPress plugin (up to version 1.3.5). The vulnerability is an XSS via wp-admin/tools.php?deletegc in the GoCodes plugin, with authenticated-execution implications (Authenticated XSS per cited WPVulndb entry). Impact described as cross-site scripting; CVSS data ...

PT-2019-7357

Name of the Vulnerable Software and Affected Versions gocodes plugin for WordPress versions through 1.3.5 Description The issue concerns a SQL injection vulnerability in the gocodes plugin for WordPress, specifically affecting the wp-admin/tools.php endpoint with the gcid parameter. This allows f...

PT-2019-7356

Name of the Vulnerable Software and Affected Versions gocodes plugin for WordPress versions through 1.3.5 Description The issue concerns a deletegc XSS in the wp-admin/tools.php file. This affects the gocodes plugin for WordPress, potentially allowing for cross-site scripting attacks...

WordPress GoCodes Plugin <= 1.3.5 - Multiple Vulnerabilities

This plugin is prone to cross site scripting vulnerability, that allows authenticated users to inject HTML and JS code. And also there is an SQL injection vulnerability, that allows authenticated users execute arbitrary SQL commands. Solution Update the plugin...