GHSA-35MH-F6P8-PJ2C WPGlobus plugin Stored XSS & CSRF security vulnerability

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

GHSA-V9H6-53FX-GH4J WPGlobus plugin Stored XSS & CSRF security vulnerability

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

GHSA-GPQ5-VQVX-CH9J WPGlobus plugin Stored XSS & CSRF security vulnerability

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

PT-2021-15760

Name of the Vulnerable Software and Affected Versions: Controlled Admin Access WordPress plugin versions prior to 1.5.2 Description: An Improper Access Control issue was discovered, allowing uncontrolled access to website customization functionality and global CMS settings, such as...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5365

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5363

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

CVE-2018-5366

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5365: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5361: Cross-Site Request Forgery (CSRF)

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

CVE-2018-5364: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5366: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5363: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

CVE-2018-5362: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepage parameter to wp-admin/options.php...

CVE-2018-5367: Improper Neutralization of Input During Web Page Generation

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

PT-2018-16923

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the wpglobus optionmore languages parameter to the wp-admin/options.php endpoint. Recommendations For WPGlobus plugin version...

PT-2018-16918

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a CSRF problem. It affects the wp-admin/options.php endpoint. There is no information provided about the estimated number of potentially affected devices or real-world incidents wher...

PT-2018-16921

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionbrowser redirectredirect by language parameter to the wp-admin/options.php endpoint. Recommendations For...

PT-2018-16922

Name of the Vulnerable Software and Affected Versions WPGlobus plugin version 1.9.6 Description The issue concerns a cross-site scripting XSS problem. It is exploited via the wpglobus optionselector wp list pagesshow selector parameter to the wp-admin/options.php endpoint. Recommendations For...