CVE-2014-4593

CVE-2014-4593 is a cross-site scripting (XSS) vulnerability in the WP Plugin Manager (WP Plugin Manager) plugin for WordPress, specifically in wp-plugins-net/index.php up to version 1.6.4.b. The flaw allows remote attackers to inject arbitrary web script or HTML via the filter parameter. Connecte...

PT-2014-6006

Name of the Vulnerable Software and Affected Versions WP Plugin Manager wppm plugin version 1.6.4.b and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the filter parameter in the wp-plugins-net/index.php file. This could...

CVE-2014-4593: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-plugins-net/index.php in the WP Plugin Manager wppm plugin 1.6.4.b and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the filter parameter...