EUVD-2015-9187

Malware in sbrugna...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

WordPress wp-plotly plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-plotly is a plugin for embedding interactive Plotly charts in pages. A cross-site scripting vulnerability exists in the WordPress...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

Design/Logic Flaw

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...

CVE-2015-9347

The wp-plotly WordPress plugin (versions prior to 1.0.3) is affected by a cross-site scripting (XSS) vulnerability. The issue arises from insufficient validation of client-side data in the plugin, enabling an attacker to execute client-side code. Some sources reference an authenticated stored XSS...

CVE-2015-9347

The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors...