WordPress < 4.7.3 Multiple Vulnerabilities

Binary data 9980.prm...

wordpress -- multiple vulnerabilities

WordPress versions 4.7.2 and earlier are affected by six security issues. Cross-site scripting XSS via media file metadata. Control characters can trick redirect URL validation. Unintended files can be deleted by administrators using the plugin deletion functionality. Cross-site scripting XSS via...

WordPress 4.5.3 Press This Function CSRF / Denial Of Service

------------------------------------------------------------------------ Cross-Site Request Forgery in WordPress Press This function allows DoS ------------------------------------------------------------------------ Sipke Mellema, July 2016...

WordPress 4.5.3 Press This Function CSRF / Denial Of Service Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Cross-Site Request Forgery in WordPress Press This function allows DoS ------------------------------------------------------------------------ Sipke Mellema, July 2016...

Nextcloud: Version 4.7.2 of wordpress is vulnerable

Hello team, I observed that your website https://nextcloud.com still use wordpress 4.7.2 Version 4.7.2 of wordpress is vulnerable to : Cross-site scripting XSS Control characters can trick redirect URL validation Cross-site scripting XSS via video URL in YouTube embeds Cross-site scripting XSS vi...

WordPress 4.2-4.7.2 - Press This CSRF DoS

...

Note Press < 0.1.2 - SQL Injection

The Note Press WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Information Disclosure Vulnerability (NVD-C-2017-07702)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the wp-admin/includes/class-wp-press-this.php file of Press This in...

CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

UBUNTU-CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

Design/Logic Flaw

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

DEBIAN-CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

CVE-2017-5610

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

CVE-2017-5610: Exposure of Sensitive Information to an Unauthorized Actor

wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface, which allows remote attackers to bypass intended access restrictions by reading terms...

WordPress Update Fixes XSS, SQL Injection Vulnerabilities

Developers with WordPress fixed three security issues this week, including a cross-site scripting and a SQL injection vulnerability, with the latest version of the CMS. The update, 4.7.2, was pushed Thursday, only two weeks after developers released the previous version. Aaron Campbell, a WordPre...

President Trump's @POTUS Twitter Linked To A Private Gmail Account

It seems like the new American President's Twitter account could easily be hacked due to security blunders he made with the most powerful Twitter account in the world, experts warned. Days after we got to know that the newly inaugurated President Donald Trump was still using his old, insecure...

WordPress 4.2.0-4.7.1 - Press This UI Available to Unauthorised Users

...

deltafarmpress.com XSS vulnerability

Vulnerable URL: http://www.deltafarmpress.com/search/node/test%27%22--%21%3E%3CImage%0CSrcset%3D.%0COnerror%3Dconfirm%60openbugbounty%60%20/// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...