WordPress Connection Information Cross Site Request Forgery Vulnerability

The FTP/SSH form functionality of WordPress was found to be vulnerable to cross site request forgery. WordPress versions 4.5.3 through 4.7.4 are affected. ------------------------------------------------------------------------ Cross-Site Request Forgery in WordPress Connection Information...

WordPress 2.0 - 3.0.1 Multiple Cross-Site Scripting (XSS) in request_filesystem_credentials()

...