Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-3843

Cross-site request forgery CSRF vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-3843

CVE-2014-3843: CSRF vulnerability in the WordPress plugin Search Everything prior to version 8.1.1 allows remote attackers to hijack authentication of unspecified victims via unknown vectors. Affected product: WordPress Search Everything plugin version

WordPress Search Everything Plugin <= 8.1.0 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of unspecified victims via unknown vectors. Solution Update the plugin...

Search Everything 8.1.0 - options.php Unspecified CSRF

The Search Everything WordPress plugin was affected by an options.php Unspecified CSRF security vulnerability...

Sql injection

SQL injection vulnerability in sesearchdefault in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2014-2316

SQL injection vulnerability in sesearchdefault in the Search Everything plugin before 7.0.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the s parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2014-2316

Technical details for CVE-2014-2316 are not provided in the connected documents. The initial description notes an SQL injection in the Search Everything WordPress plugin, but no further specifics (versions, root cause, exploit, or patch) are present. Monitor for updates.

WordPress Search Everything plugin'index.php' SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected system: WordPress search-everything = 7.0.2 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 6 5 7 6 5 Search Everything plugin enhances the WordPress default search function. Search Everything 7.0.2 and other versions does not...

WordPress Search Everything插件SQL注入漏洞

WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Search Everything插件index.php不正确过滤用户提交的"s"参数数据，允许远程攻击者利用漏洞提交特制的SQL请求，可操作或获取数据库数据。 0 WordPress Search Everything Plugin 7.0.2 WordPress Search Everything 7.0.3已经修复该漏洞，建议用户下载更新： http://wordpress.org/plugins/search-everything/...