CVE-2013-0237

CVE-2013-0237 concerns an XSS vulnerability in Plupload.as part of Moxiecode plupload < 1.5.5, leveraged by WordPress

CVE-2012-2401

CVE-2012-2401 affects WordPress before 3.3.2 via Plupload 1.5.3 and related components, where SWF content loaded from any domain could bypass Same Origin Policy, enabling cross-site scripting/credential risks as described in the vulnerability entry. Root cause: improper origin checks in Plupload ...