XSS in post_status, comment_status and ping_status

Skrevet den 4. marts 201522. august 2024 af i WordPress

Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure

4. september 2026

Plugin is vulnerable to unauthorized…

Læs mere »

Improper Access Control Vulnerability — Admin Panel Bypass

4. september 2026

A vulnerability in the access…

Læs mere »

Shortcode Injection via Merge Tag Values in Ninja Forms

3. september 2026

Ninja Forms does not neutralize…

Læs mere »

Fix XSS bug: Properly encode title used in Quick/Bulk Edit, and offer additional sanitization to various fields. Affects users of the Author or Contributor role.

http://www.cvedetails.com/cve/CVE-2011-0700/
http://core.trac.wordpress.org/changeset/17406
http://core.trac.wordpress.org/changeset/17397
http://core.trac.wordpress.org/changeset/17412

This vulnerability affects the following application versions:

WordPress 3.0
WordPress 3.0.1
WordPress 3.0.2
WordPress 3.0.3
WordPress 3.0.4

Skriv et svar Annuller svar

Om os

Standoutmedia er et webbureau dedikeret til WordPress platformen.
Vi driver egne hostingløsninger, hvor tusindvis af kunder hver dag modtager sikkerhedsopdateringer.

Læs mere om os her: https://standoutmedia.dk/