CVE-2017-18564

The sender plugin before 1.2.1 for WordPress has multiple XSS issues...

CVE-2017-18564

CVE-2017-18564 affects the WordPress plugin Sender (BestWebSoft) before 1.2.1. It describes multiple XSS flaws in the plugin, enabling authenticated users to inject JavaScript in victims’ browsers (CWE-79). The issue is network-accessible but requires user interaction; remediation is to update to...

WordPress Sender 0.7 Cross Site Request Forgery

Plugin Name : Sender A8-Cross-SiteRequestForgeryCSRF Effected Version : 0.7 and most probably lower version's if any Vulnerability : A8-Cross-Site Request Forgery CSRF Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concept : POC for...