Popup by Supsystic WordPress plugin vulnerable to Cross-Site Request Forgery

Posted by Summer of Pwnage on Feb 28

————————————————————————
Popup by Supsystic WordPress plugin vulnerable to Cross-Site Request
Forgery
————————————————————————
Radjnies Bhansingh, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-site Request Forgery vulnerablity…

VaultPress – Remote Code Execution via Man in The Middle attack

Posted by Summer of Pwnage on Feb 28

————————————————————————
VaultPress – Remote Code Execution via Man in The Middle attack
————————————————————————
David Vaartjes, July 2016

————————————————————————
Abstract
————————————————————————
A Man in The Middle (MiTM) vulnerability has been…

WordPress Adminer plugin allows public (local) database login

Posted by Summer of Pwnage on Feb 28

————————————————————————
WordPress Adminer plugin allows public (local) database login
————————————————————————
David Vaartjes, July 2016

————————————————————————
Abstract
————————————————————————
The Adminer WordPress plugin allows public login to the…

Cross-Site Scripting in Alpine PhotoTile for Instagram WordPress Plugin

Posted by Summer of Pwnage on Feb 28

————————————————————————
Cross-Site Scripting in Alpine PhotoTile for Instagram WordPress Plugin
————————————————————————
Antonis Manaras, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting vulnerability was found in…

Cross-Site Scripting in Magic Fields 1 WordPress Plugin

Posted by Summer of Pwnage on Feb 28

————————————————————————
Cross-Site Scripting in Magic Fields 1 WordPress Plugin
————————————————————————
Burak Kelebek, July 2016

————————————————————————
Abstract
————————————————————————
A reflected Cross-Site Scripting vulnerability has been encountered…

Cross-Site Scripting in Google Analytics Dashboard WordPress Plugin

Posted by Summer of Pwnage on Feb 28

————————————————————————
Cross-Site Scripting in Google Analytics Dashboard WordPress Plugin
————————————————————————
Yorick Koster, July 2016

————————————————————————
Abstract
————————————————————————
A Cross-Site Scripting vulnerability was found in the…

Cross-Site Request Forgery in Atahualpa WordPress Theme

Posted by Summer of Pwnage on Feb 28

————————————————————————
Cross-Site Request Forgery in Atahualpa WordPress Theme
————————————————————————
Spyros Gasteratos, July 2016

————————————————————————
Abstract
————————————————————————
A Cross Site Request Forgery vulnerability exists in the…

Cross-Site Scripting in Atahualpa WordPress Theme

Posted by Summer of Pwnage on Feb 28

————————————————————————
Cross-Site Scripting in Atahualpa WordPress Theme
————————————————————————
Spyros Gasteratos, July 2016

————————————————————————
Abstract
————————————————————————
A number of Cross-Site Scripting vulnerabilities were found in the…