CVE-2010-4779

The CVE-2010-4779 entry concerns the WPtouch WordPress plugin, where an XSS flaw exists in lib/includes/auth.inc.php affecting WPtouch versions 1.9.19.4 and 1.9.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via the wptouch_settings parameter to include/adsense-n...

CVE-2011-4803

Affected software: WordPress WPtouch plugin. Vulnerable component: wptouch/ajax.php; issue: SQL injection via the id parameter that allows remote execution of arbitrary SQL commands. Root cause: improper validation/escaping in the Ajax endpoint. Impact: potential data modification, query manipula...