1359 matches found
CVE-2018-5656: Cross-Site Request Forgery (CSRF)
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...
CVE-2018-5651: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the dark-mode plugin 1.6 for WordPress. XSS exists via the wp-admin/profile.php darkmodestart parameter...
CVE-2018-5667: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...
CVE-2018-5658: Cross-Site Request Forgery (CSRF)
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. CSRF exists via wp-admin/admin.php...
CVE-2018-5663: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php buttontextlink parameter...
CVE-2018-5672: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. XSS exists via the wp-admin/admin.php formfield5label parameter...
CVE-2018-5665: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logoheight parameter...
CVE-2018-5664: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php socialicon1 parameter...
CVE-2018-5662: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
CVE-2018-5653: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php weblizarpffreesettingssaveget-users parameter...
PT-2018-17068
Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue exists in the read-and-understood plugin for WordPress, where a CSRF vulnerability is present via the "wp-admin/options-general.php" API endpoint. Recommendations: For...
PT-2018-17054
Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the plugin, where a cross-site scripting XSS attack is possible. This occurs through the "security" parameter in the "/wp-admin/admin-ajax.php" API endpoin...
PT-2018-17067
Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue was found in the read-and-understood plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the rnu username validation title parameter in the...
PT-2018-17055
Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress, where a CSRF vulnerability exists. This can be exploited via the "wp-admin/admin-ajax.php" API endpoint...
PT-2018-17056
Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title icon parameter i...
CVE-2018-5659
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soontitle parameter...
CVE-2018-5661: Improper Neutralization of Input During Web Page Generation
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php logowidth parameter...
CVE-2018-5662
An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php countertitle parameter...
