CVE-2019-15327

The CVE-2019-15327 vulnerability affects the WordPress plugin import-users-from-csv-with-meta (pre-1.14.1.3). The issue is an XSS via data imported into the plugin. Public documents indicate a fix in version 1.14.1.3 (VendorFix). The vulnerability is documented across multiple sources (NVD, Red H...

CVE-2019-15328

The CVE-2019-15328 entry concerns the WordPress plugin import-users-from-csv-with-meta, vulnerable prior to version 1.14.0.3. The issue is a cross-site scripting (XSS) flaw in the plugin, allowing an attacker to execute client-side code. Documented impact indicates the vulnerability affects the p...

CVE-2017-18580

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

Remote code execution

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

CVE-2017-18580

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

WordPress import-users-from-csv-with-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. import-users-from-csv-with-meta is a user data import plugin used in it. A cross-site request forgery vulnerability exists in WordPres...

CVE-2019-5041

An exploitable Stack Based Buffer Overflow vulnerability exists in the EnumMetaInfo function of Aspose Aspose.Words library, version 18.11.0.0. A specially crafted doc file can cause a stack-based buffer overflow, resulting in remote code execution. An attacker needs to provide a malformed file t...

WordPress Meta Box Plugin < 4.16.2 File Upload Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112628";...

WordPress Meta Box Plugin < 4.16.3 File Deletion Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112627";...

WordPress twitter-cards-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site request forgery vulnerability exist...

WordPress twitter-cards-meta plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site scripting vulnerability exists in...

WordPress Meta Box Plugin Path Traversal Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Meta Box plugin is a custom field plugin used in it. A path traversal vulnerability exists in WordPress Meta Box plugin versions prior ...

WordPress Meta Box Plugin Code Issue Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Meta Box plugin is a custom field plugin used in it. WordPress Meta Box plugin has a code issue vulnerability. No details of the...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

CVE-2017-18504

The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

Cross site scripting

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

Cross site request forgery (csrf)

The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

CVE-2017-18503

The CVE-2017-18503 entry concerns the WordPress Twitter Cards Meta plugin (pre-2.5.0). The connected sources confirm a cross-site scripting (XSS) vulnerability in versions prior to 2.5.0 caused by insufficient validation of client-side data. Impact described as enabling attacker‑controlled script...