PT-2022-7981

Name of the Vulnerable Software and Affected Versions Easy Table Plugin version 1.6 Description A problematic issue has been found in the Easy Table Plugin, affecting an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross...

PT-2020-17355

Name of the Vulnerable Software and Affected Versions limit-login-attempts-reloaded plugin versions prior to 2.17.4 for WordPress Description The issue allows a malicious user to cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the us...

CVE-2020-35589: Improper Neutralization of Input During Web Page Generation

The limit-login-attempts-reloaded plugin before 2.17.4 for WordPress allows wp-admin/options-general.php?page=limit-login-attempts&tab= XSS. A malicious user can cause an administrator user to supply dangerous content to the vulnerable page, which is then reflected back to the user and executed b...

Subscribe Sidebar <= 1.3.1 - Authenticated Reflected Cross-Site Scripting

The 'status' GET parameter in subscribesidebar.php, which is displayed in the plugin's option page, is vulnerable to reflected XSS attacks. /wp-admin/options-general.php?page=subscribesidebar.php&status=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E...

CVE-2015-5483

Multiple cross-site request forgery CSRF vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that 1 add users, 2 delete posts, or 3 modify PHP files via unspecified vectors, or 4 conduct cross-site...

PT-2019-7456

Name of the Vulnerable Software and Affected Versions ad-inserter plugin versions prior to 1.5.3 Description The issue concerns a CSRF vulnerability with resultant XSS in the ad-inserter plugin for WordPress. This can be exploited via the "wp-admin/options-general.php?page=ad-inserter.php"...

CVE-2015-9497: Cross-Site Request Forgery (CSRF)

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php...

PT-2019-7418

Name of the Vulnerable Software and Affected Versions searchterms-tagging-2 plugin versions 1.535 and earlier Description The issue is related to a Cross-Site Scripting XSS vulnerability. It occurs via the count parameter in the wp-admin/options-general.php API endpoint. This allows for potential...

CVE-2015-9459: Improper Neutralization of Input During Web Page Generation

The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter...

PT-2019-7398

Name of the Vulnerable Software and Affected Versions addthis plugin versions prior to 5.0.13 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "pubid" parameter in the "/wp-admin/options-general.php?page=addthis social widget" API endpoint...

CVE-2015-9427: Cross-Site Request Forgery (CSRF)

The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter...

PT-2019-7402

Name of the Vulnerable Software and Affected Versions accurate-form-data-real-time-form-validation plugin version 1.2 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the wp-admin/options-general.php?page=Accu Data WP endpoint. Recommendations For...

CVE-2015-9439: Improper Neutralization of Input During Web Page Generation

The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthissocialwidget pubid parameter...

PT-2019-7391

Name of the Vulnerable Software and Affected Versions alpine-photo-tile-for-instagram plugin versions prior to 1.2.7.6 Description The issue concerns a CSRF vulnerability that can lead to XSS. It is exploited via the "tab" parameter in the...

CVE-2015-9433: Cross-Site Request Forgery (CSRF)

The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php...

PT-2019-7392

Name of the Vulnerable Software and Affected Versions wp-social-bookmarking-light plugin versions prior to 1.7.10 Description The issue concerns a CSRF vulnerability that can lead to XSS, specifically via configuration parameters for social media platforms such as Tumblr, Twitter, and Facebook...

PT-2019-7400

Name of the Vulnerable Software and Affected Versions Bookmarkify plugin version 2.9.2 for WordPress Description The issue concerns a CSRF vulnerability that leads to XSS. It is exploited via the "wp-admin/options-general.php?page=bookmarkify.php" API endpoint. Recommendations For Bookmarkify...

CVE-2015-9441: Cross-Site Request Forgery (CSRF)

The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php...

CVE-2015-9443: Cross-Site Request Forgery (CSRF)

The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=AccuDataWP...

CVE-2015-9432: Cross-Site Request Forgery (CSRF)

The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter...