WordPress WP Symposium Plugin “uid” SQL Injection
Application: WordPress Affected Version: version 0.64 and prior versions. Vendor’s URL: WP Symposium Plugin Bug Type: SQL Injection Risk Level: Critical Solution: Update to version 11.8.18.
View ArticleWordPress SmoothGallery Plugin “src” Arbitrary File Upload
Application: WordPress Affected Version: version 1.15.1 and prior versions Vendor’s URL: SmoothGallery Plugin Bug Type: File Upload Risk Level: Critical Solution: Update to version 1.15.2.
View ArticleWordPress YSlider Plugin “src” Arbitrary File Upload
Application: WordPress Affected Version: version 1.0 and prior versions. Vendor’s URL: YSlider Plugin Bug Type: File Upload Risk Level: Critical Solution: Update to version 1.1.
View ArticleWordPress Redirection Plugin “Referer” Header Script Insertion
Application: WordPress Affected Version: version 2.2.9 and prior versions. Vendor’s URL: Redirection Plugin Bug Type: Cross Site Scripting Risk Level: Critical Solution: Update to version 2.2.10.
View Article