EUVD-2015-9183

Malware in sbrugna...

EUVD-2015-9182

Malware in sbrugna...

CVE-2015-9342

The wp-rollback plugin before 1.2.3 for WordPress has XSS...

CVE-2015-9343

The wp-rollback plugin before 1.2.3 for WordPress has CSRF...

WordPress wp-rollback plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress wp-rollback plugin versions prior to 1.2.3. The vulnerability...

WordPress wp-rollback plugin cross-site request forgery vulnerability

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-rollback is a version rollback plugin used in it, which is mainly used for version rollback of WordPress and its plugins....

CVE-2015-9343

The wp-rollback plugin before 1.2.3 for WordPress has CSRF...

CVE-2015-9343

CVE-2015-9343 affects the WordPress wp-rollback plugin, where versions prior to 1.2.3 are vulnerable to CSRF due to insufficient verification that requests originate from a trusted user. Red Hat and CNVD entries explicitly state CSRF; other sources corroborate the same vulnerability in this plugi...

WordPress WP Rollback plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server set up a personal blog site . WP Rollback is one of the theme rollback plugin . A cross-site request forgery vulnerability exists in the...

WordPress WP Rollback Plugin <= 1.2.2 - Multiple Vulnerabilities

This plugin is prone to a cross site scripting and cross site request forgery vulnerabilities. Because of XSS vulnerability, the attackers can display any content with no filter from a simple URL, easy to include any remote malicious javascript file. Because of CSRF, anyone can force the...