CVE-2018-5668

CVE-2018-5668 affects the WordPress plugin read-and-understood version 2.1. A cross-site scripting vulnerability exists in the GET/POST parameter rnu_username_validation_title used by wp-admin/options-general.php, allowing injected script when processed by the plugin. Connected sources indicate a...

CVE-2018-5667

CVE-2018-5667 affects the WordPress plugin read-and-understood (version 2.1) . A cross-site scripting (XSS) vulnerability exists exposed by the parameter rnu_username_validation_pattern in the file wp-admin/options-general.php . The issue arises from how user-supplied input is handled, enabling i...

CVE-2018-5669

CVE-2018-5669 concerns the WordPress read-and-understood plugin, version 2.1 or earlier. The issue is a Cross-Site Request Forgery (CSRF) vulnerability exploitable via wp-admin/options-general.php, enabling an attacker to perform unintended actions. Some connected sources also note an authenticat...