CVE-2020-36769

The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wpajaximportwidgetdataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2020-36769

CVE-2020-36769 affects the WordPress plugin Widget Settings Importer/Exporter (versions up to and including 1.5.3). The issue is a Stored Cross-Site Scripting vulnerability in the wp_ajax_import_widget_dataparameter AJAX action caused by insufficient input sanitization and output escaping. It ena...

SUSE CVE-2007-0002

Multiple heap-based buffer overflows in WordPerfect Document importer/exporter libwpd before 0.8.9 allow user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted WordPerfect file in which values to loop counters are not proper...

WordPress Widget Settings Importer/Exporter plugin <= 1.5.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by WordFence in WordPress Widget Settings Importer/Exporter plugin versions = 1.5.3. Solution This plugin has been closed as of April 13, 2020 and is not available for download. Reason: Security Issue...

WordPress Aspose Importer / Exporter 1.0 File Download

Exploit Title : Wordpress Aspose Importer & Exporter v1.0 Plugin File Download Vulnerability Exploit Author : Ashiyane Digital Security Team Vendor Homepage: https://wordpress.org/plugins/aspose-importer-exporter/ Download Link :...

Aspose Importer & Exporter 1.0 - Arbitrary File Download

The Aspose Importer & Exporter WordPress plugin was affected by an Arbitrary File Download security vulnerability...

CVE-2007-1466

Integer overflow in the WP6GeneralTextPacket::readContents function in WordPerfect Document importer/exporter libwpd before 0.8.9 allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted WordPerfect file, a different...