CVE-2018-5366

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5363

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

CVE-2018-5365

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5361

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5368

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

CVE-2018-5369

The SrbTransLatin plugin 1.46 for WordPress is affected by CVE-2018-5369: a Cross-Site Scripting (XSS) vulnerability via the srbtranslatoptions action to wp-admin/options-general.php with the lang_identificator parameter. This, as documented, can allow injection of arbitrary web script or HTML. S...

CVE-2018-5368: Cross-Site Request Forgery (CSRF)

The SrbTransLatin plugin 1.46 for WordPress has CSRF via an srbtranslatoptions action to wp-admin/options-general.php...

CVE-2018-5363: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

CVE-2018-5369: Improper Neutralization of Input During Web Page Generation

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a langidentificator parameter...

CVE-2018-5366: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5365: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5362: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepage parameter to wp-admin/options.php...

CVE-2018-5364: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5361: Cross-Site Request Forgery (CSRF)

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

PT-2018-17065

Name of the Vulnerable Software and Affected Versions: responsive-coming-soon-page plugin version 1.1.18 Description: A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the bg color parameter in the...

PT-2018-17053

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. The problem is related to cross-site scripting XSS that can occur through the PFFREE Access Token...