EUVD-2014-2377

Malware in sbrugna...

Millions of WordPress Sites Got a Forced Update for a Serious Bug

The mandatory patch addressed a critical vulnerability in a widely used plugin that allowed untrusted visitors to download a website's backups...

SweetRice Backup Information Disclosure Vulnerability

SweetRice CMS is an open source web content management system CMS. The system provides search engine optimization and other features. SweetRice version 1.5.1 suffers from a backup information disclosure vulnerability, which can be exploited by an attacker to obtain database and website backup...

Zenario ProBusiness Backup Information Disclosure Vulnerability

Zenario is a web-based content management system and multilingual pages. Zenario ProBusiness version 7.3.0.37342 suffers from a backup information disclosure, which can be exploited by an attacker to obtain website backup information...

CVE-2014-2340

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

CVE-2014-2340

Cross-site request forgery CSRF vulnerability in the XCloner plugin before 3.1.1 for WordPress allows remote attackers to hijack the authentication of administrators for requests that create website backups via a request to wp-admin/plugins.php...

Сross-Site Request Forgery (CSRF) in XCloner Wordpress Plugin

High-Tech Bridge Security Research Lab discovered vulnerability in XCloner Wordpress plugin, which can be exploited to perform a CSRF attack and gain access to a backed-up copy of vulnerable website. Сross-Site Request Forgery CSRF in XCloner Wordpress Plugin: CVE-2014-2340 The vulnerability exis...