CVE-2014-3937

The CVE-2014-3937 issue affects the WordPress Contextual Related Posts plugin and is a SQL injection in the plugin’s code prior to version 1.8.10.2. Affected component: Contextual Related Posts plugin for WordPress. Root cause: improper handling of input that leads to arbitrary SQL execution. Imp...

CVE-2014-3937

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3476

The CVE concerns the WordPress Related Posts plugin (prior to version 2.6.2) for WordPress, where a Cross-Site Request Forgery (CSRF) vulnerability could allow remote attackers to hijack user authentication and perform settings changes via unspecified vectors. The underlying issue is a CSRF flaw ...

CVE-2014-3937: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-3476: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change settings via unspecified vectors...

CVE-2013-3257: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Related Posts plugin before 2.7.2 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors...

CVE-2013-2710: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via unspecified vectors...

PT-2014-5617

Name of the Vulnerable Software and Affected Versions Contextual Related Posts plugin versions prior to 1.8.10.2 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 1.8.10.2, update to version 1.8.10.2 or later to resolve the issu...

PT-2014-2623

Name of the Vulnerable Software and Affected Versions Contextual Related Posts plugin versions prior to 1.8.7 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks...

PT-2014-2666

Name of the Vulnerable Software and Affected Versions Related Posts plugin versions prior to 2.7.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that modify settings. Recommendations For versions prior to 2.7.2, update to...

WordPress Contextual Related Posts Plugin <= 1.8.10.1 - SQL Injection

Because of this vulnerability, the attackers can execute arbitrary SQL commands via unspecified vectors. Solution Update the plugin...

PT-2014-2678

Name of the Vulnerable Software and Affected Versions WordPress Related Posts plugin versions prior to 2.6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests that change settings. Recommendations For versions prior to 2.6.2,...

CVE-2013-3477

The CVE-2013-3477 vulnerability is a CSRF flaw in the WordPress plugin Related Posts by Zemanta up to version 1.3.1/1.3.1 (and before 1.3.2), allowing remote attackers to hijack user authentication and change settings via unknown vectors. Affected component: Related Posts by Zemanta plugin; impac...

CVE-2013-3477: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Related Posts by Zemanta plugin before 1.3.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change settings via unknown vectors...

Jetpack Plugin for WordPress Security Bypass

The WordPress Jetpack plugin installed on the remote host is affected by a security bypass vulnerability due to a flaw in the 'class.jetpack.php' script. This can allow a remote, unauthenticated attacker to submit crafted XML-RPC requests that bypass access controls, allowing the attacker to...

CVE-2014-0173

The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.7.2, 2.8.x before 2.8.2, and 2.9.x before 2.9.3 for WordPress does not properly restrict access to...

CVE-2014-0173: Undefined Security Weakness

The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.7.2, 2.8.x before 2.8.2, and 2.9.x before 2.9.3 for WordPress does not properly restrict access to...

PT-2014-3516

Name of the Vulnerable Software and Affected Versions Jetpack plugin versions 1.9 through 1.9.3 Jetpack plugin versions 2.0.x through 2.0.8 Jetpack plugin versions 2.1.x through 2.1.3 Jetpack plugin versions 2.2.x through 2.2.6 Jetpack plugin versions 2.3.x through 2.3.6 Jetpack plugin versions...

CVE-2014-0165

WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...

DEBIAN-CVE-2014-0165

WordPress before 3.7.2 and 3.8.x before 3.8.2 allows remote authenticated users to publish posts by leveraging the Contributor role, related to wp-admin/includes/post.php and wp-admin/includes/class-wp-posts-list-table.php...