Monthly Archives: August 2016

Full Disclosure

Persistent Cross-Site Scripting in Magic Fields 2 WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Persistent Cross-Site Scripting in Magic Fields 2 WordPress Plugin
————————————————————————
Burak Kelebek, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting vulnerability was found in the…

Full Disclosure

Persistent Cross-Site Scripting in Magic Fields 1 WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Persistent Cross-Site Scripting in Magic Fields 1 WordPress Plugin
————————————————————————
Burak Kelebek, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting vulnerability was found in the…

Full Disclosure

Ajax Load More Local File Inclusion vulnerability

Posted by Summer of Pwnage on Aug 15

————————————————————————
Ajax Load More Local File Inclusion vulnerability
————————————————————————
Burak Kelebek, July 2016

————————————————————————
Abstract
————————————————————————
It was discovered that the Ajax Load More WordPress plugin is vulnerable…

Full Disclosure

Cross-Site Scripting in Link Library WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Cross-Site Scripting in Link Library WordPress Plugin
————————————————————————
Burak Kelebek, July 2016

————————————————————————
Abstract
————————————————————————
A Reflected Cross-Site Scripting (XSS) vulnerability has been found…

Full Disclosure

Cross-Site Scripting/Cross-Site Request Forgery in Peter's Login Redirect WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Cross-Site Scripting/Cross-Site Request Forgery in Peter’s Login
Redirect WordPress Plugin
————————————————————————
Yorick Koster, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting…

Full Disclosure

Cross-Site Request Forgery vulnerability in Email Users WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Cross-Site Request Forgery vulnerability in Email Users WordPress Plugin
————————————————————————
Julien Rentrop, July 2016

————————————————————————
Abstract
————————————————————————
It was found that the Email Users WordPress…

Full Disclosure

Cross-Site Scripting vulnerability in Google Maps WordPress Plugin

Posted by Summer of Pwnage on Aug 15

————————————————————————
Cross-Site Scripting vulnerability in Google Maps WordPress Plugin
————————————————————————
Julien Rentrop, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting vulnerability was found in the…