CVE-2018-5361

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

Design/Logic Flaw

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5361

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

Cross site request forgery (csrf)

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

Design/Logic Flaw

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

Code injection

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5361

The WPGlobus plugin 1.9.6 for WordPress has CSRF via wp-admin/options.php...

CVE-2018-5367

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepost parameter to wp-admin/options.php...

CVE-2018-5366

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionmorelanguages parameter to wp-admin/options.php...

CVE-2018-5363

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionenabledlanguagesen or wpglobusoptionenabledlanguagesfr or any other language parameter to wp-admin/options.php...

CVE-2018-5364

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionbrowserredirectredirectbylanguage parameter to wp-admin/options.php...

CVE-2018-5362

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionposttypepage parameter to wp-admin/options.php...

CVE-2018-5365

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobusoptionselectorwplistpagesshowselector parameter to wp-admin/options.php...

CVE-2018-5367

The CVE-2018-5367 entry details a Stored XSS in the WPGlobus plugin for WordPress, specifically WPGlobus 1.9.6, via the wpglobus_option[post_type][post] parameter passed to wp-admin/options.php. Multiple connected sources (GHSA, OSV, CVE records, CVE.org) confirm XSS, and some references also ind...

CVE-2018-5366

The CVE-2018-5366 entry concerns the WPGlobus plugin for WordPress (version 1.9.6) and a stored XSS issue in the wpglobus_option[more_languages] parameter sent to wp-admin/options.php. Multiple connected sources confirm the vulnerability class as cross-site scripting, triggered by that parameter,...

CVE-2018-5365

The CVE-2018-5365 entry concerns the WPGlobus plugin for WordPress (version 1.9.6) and describes an XSS vulnerability in wp-admin/options.php exploited via the parameter wpglobus_option[selector_wp_list_pages][show_selector]. Multiple connected sources list this as stored XSS (and CSRF in some ad...

CVE-2018-5364

WPGlobus plugin 1.9.6 for WordPress exposes an XSS vulnerability via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/options.php. Connected sources consistently describe XSS (and some references mention stored XSS & CSRF) without providing exploit details or reme...

CVE-2018-5362

The CVE-2018-5362 entry concerns the WPGlobus WordPress plugin (version 1.9.6) with a Stored XSS vulnerability: an attacker can inject script via the wpglobus_option[post_type][page] parameter sent to wp-admin/options.php. This is a cross-site scripting flaw in the plugin’s handling of option dat...

CVE-2018-5361

The CVE-2018-5361 entry concerns the WPGlobus WordPress plugin (version 1.9.6) and a CSRF vulnerability via wp-admin/options.php. Connected sources corroborate CSRF, with some references also noting stored XSS in this plugin family. Impact details in the documents include that an attacker could p...