EUVD-2015-9267

Malware in sbrugna...

CVE-2015-9427

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

CVE-2015-9427

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

Cross site request forgery (csrf)

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

CVE-2015-9427

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

CVE-2015-9427

CVE-2015-9427 tracks a CSRF-induced XSS vulnerability in the WordPress plugin Googmonify, affecting versions up to 0.5.1. The issue is triggered via CSRF that can lead to XSS through the admin page wp-admin/options-general.php?page=googmonify.php with PID or AID parameters. Documents confirm the ...

WordPress Googmonify Plugin 0.8.1 - XSS/CSRF

Vulnerable Code : googmonify.php - Line 190,194,208input id="PID" name="PID" type="text" value="?php echo $pid; ?"input id= "Limit" name="Limit" type="text" value="?php echo $limit;?" size="5"...

WordPress Googmonify Plugin <= 0.5.1 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...

Googmonify <= 0.5.1 - CSRF & XSS

The Googmonify WordPress plugin was affected by a CSRF & XSS security vulnerability...

WordPress Googmonify 0.8.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link : https://downloads.wordpress.org/plugin/googmonify.zip + Version : 0.8.1 + Tested On : Windows FireFox + CVE :...

WordPress Googmonify 0.8.1 Cross Site Request Forgery / Cross Site Scripting Vulnerabilities

WordPress Googmonify plugin version 0.8.1 suffers from cross site request forgery and cross site scripting vulnerabilities. + Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ +...

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting Cross-Site Request Forgery

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting Cross-Site Request Forgery + Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link :...

WordPress Googmonify Plugin 0.8.1 - Multiple Vulnerabilities

Googmonify plugin is prone to multiple vulnerabilities, such as XSS and CSRF. Solution Update the plugin...

WordPress Plugin Googmonify 0.8.1 - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title : Wordpress Googmonify Plug-in XSS/CSRF + Exploit Author : Ehsan Hosseini + Date: 2015-08-21 + Vendor Homepage : https://wordpress.org/plugins/googmonify/ + Software Link : https://downloads.wordpress.org/plugin/googmonify.zip + Version : 0.8.1 + Tested On : Windows FireFox + CVE :...