>> CATEGORY: exploit

WordPress Contact Form plugin version 3.81 suffers from a cross site scripting vulnerability.

WordPress NextGEN Gallery plugin version 2.0.66.16 suffers from multiple cross site scripting vulnerabilities.

WordPress Symposium plugin version 14.05.02 suffers from a cross site scripting vulnerability.

WordPress Symposium plugin version 14.05.02 suffers from a cross site request forgery vulnerability.

This is a short article on how to escalate privileges from man/man to root/root via the “catman” cron job.

WordPress Facebook Like Button plugin version 2.32 suffers from a cross site scripting vulnerability.

WordPress Email Queue plugin version 1.0.0 suffers from a cross site request forgery vulnerability.

WordPress Donate plugin version 2.0.1 suffers from a cross site scripting vulnerability.

WordPress Contact Form To DB plugin version 1.4.0 suffers from a cross site scripting vulnerability.

WordPress Job Board plugin version 1.0.0 suffers from a cross site scripting vulnerability.