CVE-2011-4926

The Adminimize plugin for WordPress (versions before 1.7.22 ) contains a Cross-Site Scripting (XSS) vulnerability in the adminimize/adminimize_page.php file. The root cause is the improper neutralization of input during web page generation, specifically allowing remote attackers to inject arbitra...

CVE-2011-5128

CVE-2011-5128 pertains to the Adminimize WordPress plugin (before 1.7.22). The vulnerability stems from cross-site scripting (XSS) in multiple entry points: the page parameter to adminimize.php, and the page parameter(s) to adminimize/adminimize_page.php as well as options-related endpoints (inc-...