WordPress AntiVirus Plugin <= 1.0 - Full Path Disclosure

This plugin is prone to an uninstall.php direct request path disclosure vulnerability. Solution Upgrade this plugin...

AntiVirus 1.0 - uninstall.php Direct Request Path Disclosure

The AntiVirus WordPress plugin was affected by an uninstall.php Direct Request Path Disclosure security vulnerability...

CVE-2004-1828

CVE-2004-1828 affects Vcard 2.9 (and possibly other versions). The flaw is that uninstall.php does not require authorization, enabling remote attackers to trigger uninstall and delete database tables via a direct request. The NVD entry lists a base score of 5.0 (Medium) with network access, low a...

CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...