Lucene search
+L

3 matches found

Patchstack
Patchstack
added 2014/12/17 12:0 a.m.21 views

WordPress PWG Random Plugin <= 1.11 - Multiple CSRG and XSS

Because of these cross site request forgery vulnerabilities, the attackers can hijack the authentication of administrators for requests. In that way they can change plugin settings via unspecified vectors or conduct cross-site scripting attacks. Solution This plugin is closed...

6.8CVSS3.5AI score0.01046EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2014/12/09 12:0 a.m.11 views

WordPress PWG Random Plugin <= 1.11 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery attacks. The attackers can insert arbitrary script into admin page. Once exploited, admin’s browser can be made to do almost anything the admin user could typically do by hijacking admin's cookies . Parameters...

3.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2014/12/09 12:0 a.m.12 views

WordPress PWG Random Plugin <= 1.11 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery attacks. The attackers can insert arbitrary script into admin page. Once exploited, admin’s browser can be made to do almost anything the admin user could typically do by hijacking admin's cookies . Parameters...

3.1AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder