CVE-2016-10947

The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin...

EUVD-2016-1938

Malware in sbrugna...

EUVD-2016-1939

Malware in sbrugna...

CVE-2016-10948

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

WordPress Post Indexer Plugin Input Validation Error Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An input validation error vulnerability exists in the WordPress Post Indexer plugin prior to version 3.0.6.2...

WordPress Post Indexer plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Post Indexer plugin versions prior to 3.0.6.2. The...

CVE-2016-10947

The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin...

CVE-2016-10948

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

CVE-2016-10948

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

Code injection

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

Sql injection

The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin...

CVE-2016-10948

The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function...

CVE-2016-10948

CVE-2016-10948 concerns the WordPress Post Indexer plugin, affected when using versions before 3.0.6.2. The root cause is the plugin’s incorrect handling of data passed to the unserialize function, as stated in multiple sources. Public details in the provided documents are limited to this flaw; n...

CVE-2016-10947

The CVE-2016-10947 issue affects the WordPress Post Indexer plugin (versions prior to 3.0.6.2). Root cause: SQL injection via the period parameter by a super admin due to insufficient input validation in the plugin’s database queries. Impact: allows unauthorized access to read/alter data in the d...

WordPress Plugin Post Indexer 'classes/class.model.php' SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin Post Indexer 'classes/class.model.php', which can be exploited b...

Post Indexer 3.0.6.1 SQL Injection Vulnerability

Post Indexer version 3.0.6.1 suffers from a remote SQL injection vulnerability. Details ================ Software: Post Indexer Version: 3.0.6.1 Homepage: http://premium.wpmudev.org/project/post-indexer/ Advisory report:...