219 matches found
CVE-2018-6467
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php...
CVE-2018-6468
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSid parameter to wp-admin/options-general.php...
CVE-2018-6469
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...
CVE-2018-6467
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php...
CVE-2018-6467: Cross-Site Request Forgery (CSRF)
The flickrRSS plugin 5.3.1 for WordPress has CSRF via wp-admin/options-general.php...
CVE-2018-6466: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSset parameter to wp-admin/options-general.php...
CVE-2018-6468: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSSid parameter to wp-admin/options-general.php...
PT-2018-17565
Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS id parameter to "wp-admin/options-general.php" API endpoint. Recommendations For flickrRSS...
PT-2018-17563
Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS set parameter to "wp-admin/options-general.php". Recommendations For version 5.3.1, consid...
PT-2018-17566
Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the flickrRSS tags parameter to "wp-admin/options-general.php". Recommendations For version 5.3.1, avoid...
CVE-2018-6469: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in flickrRSS.php in the flickrRSS plugin 5.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the flickrRSStags parameter to wp-admin/options-general.php...
PT-2018-17564
Name of the Vulnerable Software and Affected Versions flickrRSS plugin version 5.3.1 Description The issue concerns a CSRF problem. It affects the "wp-admin/options-general.php" API endpoint. Recommendations For flickrRSS plugin version 5.3.1, consider restricting access to the...
Cross site request forgery (csrf)
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...
CVE-2018-5668
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...
CVE-2018-5668: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationtitle parameter...
CVE-2018-5669: Cross-Site Request Forgery (CSRF)
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. CSRF exists via wp-admin/options-general.php...
CVE-2018-5667: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...
PT-2018-17067
Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue was found in the read-and-understood plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the rnu username validation title parameter in the...