WordPress Sites Vulnerable to Plugin-Related SQL Attacks

More than one million WordPress sites may be vulnerable to a critical plugin issue that could open sites up to SQL injection attacks and in turn, total takeover. The problem stems from a weak key vulnerability in WP-Slimstat, a web analytics plugin for the content management system that’s been...

CVE-2015-1204

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

CVE-2015-1204

Summary: WP Slimstat for WordPress is affected by a Cross-Site Scripting (XSS) vulnerability in the Save Filters functionality. The issue allows an attacker to inject arbitrary script or HTML via the fs[resource] parameter on the wp-slim-view-2 page (to wp-admin/admin.php). Affected versions: bef...

CVE-2015-1204: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Save Filters functionality in the WP Slimstat plugin before 3.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fsresource parameter in the wp-slim-view-2 page to wp-admin/admin.php...

CVE-2014-100027

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-100027

CVE-2014-100027 concerns the WordPress plugin WP SlimStat. Affected software: WP SlimStat plugin for WordPress, with versions older than 3.5.6. Root cause: cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Impact (as st...

CVE-2014-100027

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-100027: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

SlimStat-Ex - Open Flash Chart Arbitrary File Creation

The wp-slimstat-ex WordPress plugin was affected by an Open Flash Chart Arbitrary File Creation security vulnerability...

WP SlimStat 2.8.4 - wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS

The Slimstat Analytics WordPress plugin was affected by a wp-content/plugins/wp-slimstat/admin/view/panel1.php s Parameter XSS security vulnerability...

WP-SlimStat 0.9.2 WordPress Plugin Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26432/info WP-SlimStat Plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...