CVE-2017-18496

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

EUVD-2020-29506

Malware in sbrugna...

CVE-2020-8658

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In this...

CVE-2020-8658

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In...

Cross site request forgery (csrf)

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccesseditor CSRF. The flag htccssnoncename passes the nonce to WordPress but the plugin does not validate it correctly, resulting in a wrong implementation of anti-CSRF protection. In...

CVE-2020-8658

The CVE concerns WordPress plugin BestWebSoft Htaccess (

WordPress Htaccess by BestWebSoft plugin <= 1.8.1 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by V1n1v131r4 in WordPress Htaccess by BestWebSoft plugin versions = 1.8.1. Solution Update the WordPress Htaccess by BestWebSoft plugin to the latest available version at least 1.8.2...

WordPress htaccess plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. htaccess is an access control plugin used in it. A cross-site scripting vulnerability exists in the WordPress htaccess plugin versions...

CVE-2017-18496

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

CVE-2017-18496

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

Cross site scripting

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

CVE-2017-18496

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...

CVE-2017-18496

Summary for CVE-2017-18496 : The WordPress htaccess plugin from BestWebSoft, prior to version 1.7.6, contains multiple Cross‑Site Scripting (XSS) flaws. Technical details across sources indicate the vulnerability resides in the htaccess plugin’s handling of user-supplied data, enabling an authent...