CVE-2015-9429

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panelpage parameter...

PT-2019-7388

Name of the Vulnerable Software and Affected Versions yith-maintenance-mode plugin versions prior to 1.2.0 Description The issue concerns a CSRF vulnerability with resultant XSS in the yith-maintenance-mode plugin for WordPress. This can be exploited via the...

PT-2015-4217

Name of the Vulnerable Software and Affected Versions Simple Sticky Footer plugin versions prior to 1.3.3 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for...

CVE-2007-3238

Cross-site scripting XSS vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATHINFO REQUESTURI to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. NOTE: this might not...

CVE-2007-3238: Undefined Security Weakness

Cross-site scripting XSS vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATHINFO REQUESTURI to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. NOTE: this might not...