CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkmefacebook CSRF...

EUVD-2016-1980

Malware in sbrugna...

EUVD-2016-1979

Malware in sbrugna...

CVE-2024-49661: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lew Ayotte leenk.me leenkme allows Reflected XSS.This issue affects leenk.me: from n/a through = 2.16.0...

CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkmefacebook CSRF...

CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

Design/Logic Flaw

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkmefacebook CSRF...

CVE-2016-10989

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkmefacebook CSRF...

CVE-2016-10989

The CVE-2016-10989 entry concerns the WordPress Leenkme plugin prior to 2.6.0, with a CSRF vulnerability in the admin page (wp-admin/admin.php?page=leenkme_facebook). Affected component: Leenkme WordPress plugin. Root cause: insufficient CSRF protection in the plugin. Impact: potential unauthoriz...

CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

CVE-2016-10988

The CVE-2016-10988 entry pertains to the leenkme WordPress plugin. Affected: leenkme plugin for WordPress. Vulnerable condition: stored cross-site scripting (XSS) via multiple fields (facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, _wp_http_referer). Ro...

CVE-2016-10988

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

PT-2019-7782

Name of the Vulnerable Software and Affected Versions leenkme plugin versions prior to 2.6.0 Description The issue concerns a CSRF problem in the leenkme plugin for WordPress. The affected endpoint is "wp-admin/admin.php?page=leenkme facebook". Recommendations For versions prior to 2.6.0, update ...

CVE-2016-10988: Improper Neutralization of Input During Web Page Generation

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebookmessage, facebooklinkname, facebookcaption, facebookdescription, defaultimage, or wphttpreferer...

CVE-2016-10989: Cross-Site Request Forgery (CSRF)

The leenkme plugin before 2.6.0 for WordPress has wp-admin/admin.php?page=leenkmefacebook CSRF...

PT-2019-7781

Name of the Vulnerable Software and Affected Versions leenkme plugin versions prior to 2.6.0 Description The issue concerns stored XSS in the leenkme plugin for WordPress. It can be exploited via variables such as facebook message, facebook linkname, facebook caption, facebook description, defaul...

WordPress LeenkMe Plugin Cross-Site Scripting

A cross-site scripting vulnerability exists in WordPress LeenkMe Plugin. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...