WordPress Google Forms Plugin unauthenticated PHP Object injection vulnerability

Exploit for php platform in category web applications Abstract A PHP Object injection vulnerability was found in the Google Forms WordPress Plugin, which can be used by an unauthenticated user to instantiate arbitrary PHP Objects. Using this vulnerability it is possible to execute arbitrary PHP...

Google Forms 0.84-0.87 - Unauthenticated PHP Object Injection

The Google Forms WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...

Carbanak Using Google Services for Command and Control

Carbanak certainly has not sat idly by after years of advanced criminal campaigns targeting primarily financial institutions. The outfit, alleged to have stolen from more than 100 banks worldwide, has popped up again with a new means of managing command and control over its malware and implants...

Google Forms <= 0.84 - Cross-Site Scripting (XSS)

The Google Forms WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Google Forms Plugin <= 0.84 - Cross Site Scripting (XSS)

Because of this vulnerability, attackers can steal Administrators' session tokens or perform arbitrary actions on their behalf. Solution Update the plugin...

WordPress Google Forms 0.84 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Google Forms WordPress Plugin ------------------------------------------------------------------------ Yorick Koster, July 2016...