EUVD-2015-9312

Malware in sbrugna...

WordPress incoming-links plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. incoming-links is a plugin for adding inbound links. A cross-site scripting vulnerability exists in the WordPress incoming-links...

CVE-2015-9472

CVE-2015-9472 affects the WordPress incoming-links plugin prior to 0.9.10b, where referrers.php XSS is triggered via the Referer HTTP header. Multiple connected sources (NVD, RH, CNVD, CVE listings) confirm a cross-site scripting vulnerability in this plugin. Public details describe the flaw and ...

CVE-2015-9472: Improper Neutralization of Input During Web Page Generation

The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header...

WordPress Incoming Links Plugin <= 0.9.9b - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via referrers.php. Solution Update the plugin...

DEBIAN-CVE-2012-4448

Cross-site request forgery CSRF vulnerability in wp-admin/index.php in WordPress 3.4.2 allows remote attackers to hijack the authentication of administrators for requests that modify an RSS URL via a dashboardincominglinks edit action...