Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress Plugin

Posted by Summer of Pwnage on Jul 31

————————————————————————
Stored Cross-Site Scripting vulnerability in Easy Testimonials WordPress
Plugin
————————————————————————
Bente Schopman, July 2016

————————————————————————
Abstract
————————————————————————
Multiple stored Cross-Site Scripting…

Insert PHP WordPress Plugin allows authenticated user to execute arbitrary PHP

Posted by Summer of Pwnage on Jul 31

————————————————————————
Insert PHP WordPress Plugin allows authenticated user to execute
arbitrary PHP
————————————————————————
Marcel Vermeulen <vermeulen.mc.at.gmail.com> & Ed van der Vlies
<ecvdvlies.at.gmail.com>, July 2016

————————————————————————
Abstract…