CVE-2015-9427: Cross-Site Request Forgery (CSRF)

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

PT-2019-7391

Name of the Vulnerable Software and Affected Versions alpine-photo-tile-for-instagram plugin versions prior to 1.2.7.6 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "tab" parameter in the...

CVE-2015-9433: Cross-Site Request Forgery (CSRF)

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...

PT-2019-7392

Name of the Vulnerable Software and Affected Versions wp-social-bookmarking-light plugin versions prior to 1.7.10 Description The issue concerns a CSRF vulnerability that can lead to XSS, specifically via configuration parameters for social media platforms such as Tumblr, Twitter, and Facebook...

CVE-2015-9443: Cross-Site Request Forgery (CSRF)

The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=AccuDataWP...

CVE-2015-9432: Cross-Site Request Forgery (CSRF)

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...

CVE-2015-9449: Improper Neutralization of Special Elements used in an SQL Command

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

CVE-2015-9439: Improper Neutralization of Input During Web Page Generation

The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...

PT-2019-7398

Name of the Vulnerable Software and Affected Versions addthis plugin versions prior to 5.0.13 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "pubid" parameter in the "/wp-admin/options-general.php?page=addthis social widget" API endpoint...

PT-2019-7383

Name of the Vulnerable Software and Affected Versions multicons plugin versions prior to 3.0 Description The issue concerns a CSRF with resultant XSS in the multicons plugin for WordPress. This can be exploited via the global url or admin url parameter in the...

PT-2019-7408

Name of the Vulnerable Software and Affected Versions microblog-poster plugin versions prior to 1.6.2 Description The issue allows for SQL Injection via the account id parameter in the "wp-admin/options-general.php?page=microblogposter.php" API endpoint. Recommendations For versions prior to 1.6....

CVE-2015-9441: Cross-Site Request Forgery (CSRF)

The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php...

PT-2019-7400

Name of the Vulnerable Software and Affected Versions Bookmarkify plugin version 2.9.2 for WordPress Description The issue concerns a CSRF vulnerability that leads to XSS. It is exploited via the "wp-admin/options-general.php?page=bookmarkify.php" API endpoint. Recommendations For Bookmarkify...

PT-2019-7402

Name of the Vulnerable Software and Affected Versions accurate-form-data-real-time-form-validation plugin version 1.2 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the wp-admin/options-general.php?page=Accu Data WP endpoint. Recommendations For...

CVE-2015-9387

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...

Cross site request forgery (csrf)

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...

CVE-2015-9408: Cross-Site Request Forgery (CSRF)

The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS...

PT-2019-7367

Name of the Vulnerable Software and Affected Versions xpinner-lite plugin versions through 2.2 for WordPress Description The issue concerns a CSRF vulnerability with resultant XSS in the wp-admin/options-general.php endpoint. This allows for cross-site request forgery attacks that can lead to...

CVE-2015-9387: Cross-Site Request Forgery (CSRF)

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...

PT-2019-7346

Name of the Vulnerable Software and Affected Versions mtouch-quiz plugin versions prior to 3.1.3 for WordPress Description The issue concerns a CSRF vulnerability in the wp-admin/options-general.php endpoint. This allows for potential unauthorized actions. No information is provided about the...