Multiple SQL injection vulnerabilities in WordPress Video Player

Posted by Summer of Pwnage on Jul 19

————————————————————————
Multiple SQL injection vulnerabilities in WordPress Video Player
————————————————————————
David Vaartjes & Yorick Koster, July 2016

————————————————————————
Abstract
————————————————————————
It was discovered that WordPress…

Cross-Site Request Forgery in Icegram WordPress Plugin

Posted by Summer of Pwnage on Jul 19

————————————————————————
Cross-Site Request Forgery in Icegram WordPress Plugin
————————————————————————
Yorick Koster, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Request Forgery vulnerability was found in the Icegram…