CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

EUVD-2017-9727

Malware in sbrugna...

EUVD-2017-9728

Malware in sbrugna...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

Sql injection

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

Cross site scripting

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18615

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS...

CVE-2017-18615

The CVE-2017-18615 entry concerns the Kama Click Counter WordPress plugin, specifically versions prior to 3.5.0, which is affected by a cross-site scripting (XSS) vulnerability. The vulnerability is documented across multiple sources (NVD, RH, Red Hat, WPVulndb, CVE list) with consistent wording ...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2017-18614

CVE-2017-18614 affects the WordPress plugin kama-clic-counter (v3.4.9) . Multiple connected sources confirm a SQL injection vulnerability exposed via the plugin’s admin.php, specifically the order parameter . The root cause is described as a lack of validation of externally entered SQL statements...