EUVD-2015-9299

Malware in sbrugna...

WordPress searchterms-tagging-2 plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. searchterms-tagging-2 is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

PT-2019-7418

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the count parameter in the wp-admin/options-general.php API endpoint. This allows for potential...

PT-2019-7417

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier for WordPress Description The issue concerns SQL injection via the count parameter in the pk stt2 db get popular terms function, which is exploitable via CSRF. This allows for potential...

CVE-2015-9458: Improper Neutralization of Special Elements used in an SQL Command

The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pkstt2dbgetpopularterms count parameter exploitable via CSRF...

CVE-2015-9459: Improper Neutralization of Input During Web Page Generation

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter...