2017 March

WordPress Magic Fields 1 1.7.1 Cross Site Scripting

Posted by deepcore under exploit (No Respond)

WordPress Magic Fields 1 plugin version 1.7.1 suffers from a cross site scripting vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress Google Analytics Dashboard plugin version 2.1.1 suffers from a cross site scripting vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress Alpine PhotoTile for Instagram plugin version 1.2.7.7 suffers from a cross site scripting vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress VaultPress plugin version 1.8.4 suffers from a remote code execution via man-in-the-middle attack vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress Popup by Supsystic plugin 1.7.6 suffers from a cross site request forgery vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress User Login Log plugin version 2.2.1 suffers from a cross site scripting vulnerability.

Posted by deepcore under exploit (No Respond)

WordPress Contact Form Manager plugin suffers from cross site request forgery and cross site scripting vulnerabilities.

Posted by deepcore under exploit (No Respond)

WordPress Contact Form plugin version 4.0.0 suffers from a cross site scripting vulnerability.

Posted by deepcore under exploit (No Respond)

X.org suffers from privilege escalation, weak entropy, and use-after-free vulnerabilities.

Posted by deepcore under exploit (No Respond)

WordPress WP-SpamFree Anti-Spam plugin version 2.1.1.4 suffers from a cross site scripting vulnerability.