13 matches found
EUVD-2017-9687
Malware in sbrugna...
EUVD-2014-2354
Malware in sbrugna...
EUVD-2014-3780
Malware in sbrugna...
CVE-2017-18571
The search-everything plugin before 8.1.7 for WordPress has SQL injection related to WordPress 4.7.x, a different vulnerability than CVE-2014-2316...
CVE-2014-3843
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
WordPress search-everything plugin SQL injection vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. search-everything is a search function plugin used in it. WordPress search-everything plugin has a SQL injection vulnerability. An...
CVE-2016-10917
The search-everything plugin before 8.1.6 for WordPress has SQL injection related to empty search strings, a different vulnerability than CVE-2014-2316...
CVE-2016-10917
The CVE-2016-10917 entry corresponds to the WordPress plugin search-everything, vulnerable before version 8.1.6. The issue is an SQL injection when search strings are empty, as described in the initial document. Connected sources reinforce the affected component (search-everything plugin for Word...
CVE-2014-3843
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-3843
Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-3843
CVE-2014-3843: CSRF vulnerability in the WordPress plugin Search Everything prior to version 8.1.1 allows remote attackers to hijack authentication of unspecified victims via unknown vectors. Affected product: WordPress Search Everything plugin version
CVE-2014-2316
Technical details for CVE-2014-2316 are not provided in the connected documents. The initial description notes an SQL injection in the Search Everything WordPress plugin, but no further specifics (versions, root cause, exploit, or patch) are present. Monitor for updates.