Wise Search Widget 1.1 - s Parameter Reflected XSS

The Category Wise Search WordPress plugin was affected by a s Parameter Reflected XSS security vulnerability...

Dropdown Menu Widget 1.9.1 - Script Insertion CSRF

The Dropdown Menu Widget WordPress plugin was affected by a Script Insertion CSRF security vulnerability...

ADIF Log Search Widget - Cross-Site Scripting (XSS)

The ADIF Log Search Widget WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

Social Media Widget 4.0 - social-widget.php MITM Weakness Arbitrary Code Injection

The Social Media Widget WordPress plugin was affected by a social-widget.php MITM Weakness Arbitrary Code Injection security vulnerability...

Mini Mail Dashboard Widget 1.36 - wp-mini-mail.php abspath Parameter Remote File Inclusion

The mini-mail-dashboard-widget WordPress plugin was affected by a wp-mini-mail.php abspath Parameter Remote File Inclusion security vulnerability...

jQuery Mega Menu 1.0 - Local File Inclusion

The JQuery Mega Menu Widget WordPress plugin was affected by a Local File Inclusion security vulnerability...

Advanced Text Widget <= 2.0.0 - Cross Site Scripting

The Advanced Text Widget WordPress plugin was affected by a Cross Site Scripting security vulnerability...

Rich Widget - File Upload

The rich-widget WordPress plugin was affected by a File Upload security vulnerability...

grou-r&om-image-widget - Full Path Disclosure

The grou-random-image-widget WordPress plugin was affected by a Full Path Disclosure security vulnerability...

WordPress Flash Player Widget Plugin - Content Spoofing

This plugin is prone to a content spoofing vulnerability in dewplayer.swf. Solution Update the plugin...

WordPress Widget Control Powered Plugin <= 1.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php idDropdown parameter. Solution Update the plugin...

Code injection

The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property...

CVE-2014-4672: Improper Control of Generation of Code

The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property...

yii -- Remote arbitrary PHP code execution

Yii PHP Framework developers report: We are releasing Yii 1.1.15 to fix a security issue found in 1.1.14. We urge all 1.1.14 users to upgrade their Yii to this latest release. Note that the issue only affects 1.1.14. All previous releases are not affected. Upgrading to this release from 1.1.14 is...

CVE-2014-4687

Multiple cross-site scripting XSS vulnerabilities in pfSense before 2.1.4 allow remote attackers to inject arbitrary web script or HTML via 1 the starttime0 parameter to firewallschedule.php, 2 the rssfeed parameter to rss.widget.php, 3 the servicestatusfilter parameter to...

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

CVE-2014-4516

The CVE-2014-4516 entry affects the WordPress BIC Media Widget plugin (

CVE-2014-4516

Cross-site scripting XSS vulnerability in bicm-carousel-preview.php in the BIC Media Widget plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the param parameter...

Widget Property 1.1.19 Property.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it i...