WordPress Altos Connect Widget 1.3.0 Cross Site Scripting

Title: WordPress 'Altos Connect Widget' Plugin Version: 1.3.0 Author: Morten Nørtoft, Kenneth Jepsen & Mikkel Vej Date: 2015-06-15 Download: - https://wordpress.org/plugins/altos-connect/ - https://plugins.svn.wordpress.org/altos-connect/ Notified WordPress: 2015-06-21...

Oracle Application Express Cross Site Scripting Vulnerability

Exploit for multiple platform in category web applications title: Permanent Cross-Site Scripting product: Oracle Application Express vulnerable version: All versions prior to 4.2.3.00.08 fixed version: 4.2.3.00.08 CVE number: CVE-2015-2655 impact: high homepage: https://apex.oracle.com/i/index.ht...

SQL Injection Vulnerability in Widget Parameters of Hangzhou Elite Online Education Technology Online Learning Platform

Hangzhou Elite Online Education Technology Online Learning Platform is an education and training platform. A SQL injection vulnerability exists in the widget parameters of the WidgetsHandler.ashx page of the Hangzhou Elite Online Education Technology online learning platform. Comprehensive...

CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS]

Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link: https://wordpress.org/plugins/free-counter/ Version: 1.1 Tested on: WordPress 4.2.2...

WordPress Plugin Free Counter 1.1 - Persistent Cross-Site Scripting

WordPress Plugin Free Counter 1.1 - Persistent Cross-Site Scripting Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link:...

WordPress Plugin Free Counter 1.1 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link:...

WordPress Free Counter 1.1 Cross Site Scripting

Exploit Title: WordPress Free Counter Plugin Stored XSS Date: 2015/05/25 Exploit Author: Panagiotis Vagenas Contact: https://twitter.com/panVagenas Vendor Homepage: http://www.free-counter.org Software Link: https://wordpress.org/plugins/free-counter/ Version: 1.1 Tested on: WordPress 4.2.2...

WordPress Wise Search Widget Plugin <= 1.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "s" parameter. Solution Upgrade this plugin...

WordPress Wise Search Widget Plugin <= 1.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via "s" parameter. Solution Upgrade this plugin...

WordPress Random Image Widget Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress Social Media Widget Plugin <= 4.0.1 - Unspecified Vulnerability

This plugin is prone to an unspecified issue, because of malicious code. Solution Update the plugin...

WordPress Random Image Widget Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress Quick Post Widget Plugin <= 1.9.1 - Multiple CSRF

This plugin is prone to a cross site request forgery vulnerability. Solution Update plugin...

jquery-ui: XSS vulnerability in jQuery.ui.dialog title option

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

jquery-ui: XSS vulnerability in default content in Tooltip widget

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

CVE-2015-1383

CVE-2015-1383 concerns the WordPress Geo Mashup plugin (versions prior to 1.8.3). The vulnerability is a Cross‑Site Scripting (XSS) flaw in the plugin’s geo search widget, where the input from the user’s search key is not properly sanitized, allowing an attacker to inject arbitrary scripts into t...

CVE-2015-1383

Cross-site scripting XSS vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search key...

PT-2015-5256 · WordPress · Geo Mashup

Name of the Vulnerable Software and Affected Versions: Geo Mashup plugin versions prior to 1.8.3 Description: The issue is related to a cross-site scripting XSS vulnerability in the geo search widget of the Geo Mashup plugin for WordPress. This vulnerability allows remote attackers to inject...

Oracle GlassFish Server Admin Console Subware Arbitrary Code Execution Vulnerability

Oracle GlassFish Enterprise Server is an open source and open community platform for building and deploying next-generation applications and services. A security vulnerability in the Oracle GlassFish Enterprise Server management console widget allows remote attackers to exploit the vulnerability ...

Feedweb 2.4.1-3.0.6 - SQL Injection

The feedweb WordPress plugin was affected by a SQL Injection security vulnerability. http://www.example.com/wp-content/plugins/feedweb/widgetcontainer.php?pid= Inject here &ishp=true...