Security
Headlines
HeadlinesLatestCVEs

Tag

#google

CVE-2015-9298: Events Manager

The events-manager plugin before 5.6 for WordPress has code injection.

CVE
#sql#xss#csrf#vulnerability#web#ios#windows#apple#google#js#git#java#wordpress#php#perl#pdf#oauth#auth#firefox#sap#ssl
CVE-2019-14787: Newsletters

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.

CVE-2019-14792

The WP Google Maps plugin before 7.11.35 for WordPress allows XSS via the wp-admin/ rectangle_name or rectangle_opacity parameter.