EUVD-2015-5439

Malware in sbrugna...

EUVD-2015-9187

Malware in sbrugna...

CVE-2015-5484

Cross-site scripting XSS vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post...

CVE-2015-5484

CVE-2015-5484 is a stored XSS vulnerability in the WordPress Plotly plugin prior to 1.0.3. It allows remote authenticated users to inject arbitrary script/HTML into posts, potentially affecting other site users. Affected component: Plotly WordPress plugin; vulnerability path: XSS via post content...

Design/Logic Flaw

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...