PT-2018-17053

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. The problem is related to cross-site scripting XSS that can occur through the PFFREE Access Token...

PT-2018-17059

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the coming-soon sub title parameter in the "wp-admin/admin.php" endpoint...

PT-2018-17063

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue exists in the plugin, where cross-site scripting XSS is possible. This occurs via the social icon 1 parameter in the wp-admin/admin.php page. Recommendations For...

PT-2018-17072

Name of the Vulnerable Software and Affected Versions: booking-calendar plugin version 2.1.7 Description: A security issue was found in the booking-calendar plugin for WordPress, where a CSRF exists via the "wp-admin/admin.php" API endpoint. Recommendations: For version 2.1.7, update to a newer...

PT-2018-17060

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the logo width parameter in the...

PT-2018-17064

Name of the Vulnerable Software and Affected Versions: responsive-coming-soon-page plugin version 1.1.18 Description: A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the logo height parameter in the...

PT-2018-17051

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists. This is due to the dark mode end parameter in the "wp-admin/profile.php" endpoint. Recommendation...

PT-2018-17061

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the counter title parameter in the...

PT-2018-17050

Name of the Vulnerable Software and Affected Versions dark-mode plugin version 1.6 Description A security issue was found in the dark-mode plugin for WordPress, where cross-site scripting XSS exists via the dark mode start parameter in the "wp-admin/profile.php" API endpoint. Recommendations For...

PT-2018-17057

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A Cross-Site Request Forgery CSRF issue was discovered in the responsive-coming-soon-page plugin for WordPress. The issue exists via the wp-admin/admin.php endpoint. Recommendations...

PT-2018-17066

Name of the Vulnerable Software and Affected Versions: read-and-understood plugin version 2.1 Description: A security issue exists in the read-and-understood plugin for WordPress, where cross-site scripting XSS is possible. This occurs via the "wp-admin/options-general.php" endpoint, specifically...

PT-2018-17052

Name of the Vulnerable Software and Affected Versions weblizar-pinterest-feeds plugin version 1.1.1 Description A security issue was found in the weblizar-pinterest-feeds plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the "weblizar pffree settings save...

PT-2018-17058

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. Cross-site scripting XSS exists through the coming-soon title parameter in the "wp-admin/admin.ph...

PT-2018-17062

Name of the Vulnerable Software and Affected Versions responsive-coming-soon-page plugin version 1.1.18 Description A security issue was found in the responsive-coming-soon-page plugin for WordPress. This issue allows for cross-site scripting XSS attacks through the button text link parameter in...

PT-2018-16921

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionbrowser redirectredirect by language parameter to the wp-admin/options.php endpoint. Recommendations For...

PT-2018-16924

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the wpglobus optionpost typepost parameter to the wp-admin/options.php endpoint. Recommendations For WPGlobus plugin version 1.9....

PT-2018-16920

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionenabled languagesen or wpglobus optionenabled languagesfr or any other language parameter to the...

PT-2018-16922

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionselector wp list pagesshow selector parameter to the wp-admin/options.php endpoint. Recommendations For...

PT-2018-16918

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a CSRF problem. It affects the wp-admin/options.php endpoint. There is no information provided about the estimated number of potentially affected devices or real-world incidents wher...

PT-2018-16919

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS flaw. It is triggered via the wpglobus optionpost typepage parameter to the wp-admin/options.php endpoint. Recommendations For WPGlobus plugin version 1.9....