EUVD-2014-9216

Malware in sbrugna...

WordPress Plugin Simplelife Has Multiple Cross-Site Request Forgery Vulnerabilities

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Simplelife plugin is a plugin for the Simplelife theme. The WordPress plugin Simplelife suffers from multiple cross-site reque...

CVE-2014-9395

Multiple cross-site request forgery CSRF vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simplehoverback, 2 simplehovertext, 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simplehoverback, 2 simplehovertext, 3...

CVE-2014-9395

Multiple cross-site request forgery CSRF vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting XSS attacks via the 1 simplehoverback, 2 simplehovertext, 3...

CVE-2014-9395

CVE-2014-9395 affects the WordPress Simplelife plugin (versions 1.2 and earlier). The vulnerability set comprises multiple CSRF flaws that allow remote attackers to hijack administrator authentication for requests that trigger XSS via parameters in simplelife.php (notably simplehoverback, simpleh...

WordPress Simplelife 1.2 CSRF / XSS

Title: CSRF / Stored XSS Vulnerability in Simplelife Wordpress Plugin Author: Manideep K CVE-ID: CVE-2014-9395 Plugin Homepage: https://wordpress.org/plugins/simplelife/ Version Affected: 1.2 probably lower versions Severity: High Description: Vulnerable Parameter: multiple fields such as...

Simplelife <= 1.2 - Multiple CSRF

Plugin is still affected and has been closed...