219 matches found
CVE-2015-9427: Cross-Site Request Forgery (CSRF)
The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...
PT-2019-7402
Name of the Vulnerable Software and Affected Versions accurate-form-data-real-time-form-validation plugin version 1.2 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the wp-admin/options-general.php?page=Accu Data WP endpoint. Recommendations For...
PT-2019-7391
Name of the Vulnerable Software and Affected Versions alpine-photo-tile-for-instagram plugin versions prior to 1.2.7.6 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "tab" parameter in the...
CVE-2015-9433: Cross-Site Request Forgery (CSRF)
The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...
PT-2019-7392
Name of the Vulnerable Software and Affected Versions wp-social-bookmarking-light plugin versions prior to 1.7.10 Description The issue concerns a CSRF vulnerability that can lead to XSS, specifically via configuration parameters for social media platforms such as Tumblr, Twitter, and Facebook...
CVE-2015-9443: Cross-Site Request Forgery (CSRF)
The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=AccuDataWP...
CVE-2015-9432: Cross-Site Request Forgery (CSRF)
The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...
CVE-2015-9449: Improper Neutralization of Special Elements used in an SQL Command
The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...
CVE-2015-9439: Improper Neutralization of Input During Web Page Generation
The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...
PT-2019-7398
Name of the Vulnerable Software and Affected Versions addthis plugin versions prior to 5.0.13 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "pubid" parameter in the "/wp-admin/options-general.php?page=addthis social widget" API endpoint...
PT-2019-7383
Name of the Vulnerable Software and Affected Versions multicons plugin versions prior to 3.0 Description The issue concerns a CSRF with resultant XSS in the multicons plugin for WordPress. This can be exploited via the global url or admin url parameter in the...
PT-2019-7408
Name of the Vulnerable Software and Affected Versions microblog-poster plugin versions prior to 1.6.2 Description The issue allows for SQL Injection via the account id parameter in the "wp-admin/options-general.php?page=microblogposter.php" API endpoint. Recommendations For versions prior to 1.6....
CVE-2015-9441: Cross-Site Request Forgery (CSRF)
The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php...
PT-2019-7400
Name of the Vulnerable Software and Affected Versions Bookmarkify plugin version 2.9.2 for WordPress Description The issue concerns a CSRF vulnerability that leads to XSS. It is exploited via the "wp-admin/options-general.php?page=bookmarkify.php" API endpoint. Recommendations For Bookmarkify...
CVE-2015-9387
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...
Cross site request forgery (csrf)
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...
PT-2019-7346
Name of the Vulnerable Software and Affected Versions mtouch-quiz plugin versions prior to 3.1.3 for WordPress Description The issue concerns a CSRF vulnerability in the wp-admin/options-general.php endpoint. This allows for potential unauthorized actions. No information is provided about the...
CVE-2015-9408: Cross-Site Request Forgery (CSRF)
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...
PT-2019-7367
Name of the Vulnerable Software and Affected Versions xpinner-lite plugin versions through 2.2 for WordPress Description The issue concerns a CSRF vulnerability with resultant XSS in the wp-admin/options-general.php endpoint. This allows for cross-site request forgery attacks that can lead to...