Archives: Reports

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the auto_plugin_install AJAX action, which makes it possible for attackers to install and activate arbitrary plugins from WordPress.org repository via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the ht-slider_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the ht-contactform_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the wpinsurance_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the htevent_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the htportfolio_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the wpeducation_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the quickswish_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the wpfilm-studio_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the ht-magazine_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the 99fy_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the wppolitic_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Cross-Site Request Forgery (CSRF) vulnerability due to a missing nonce check in the ever-compare_ajax_plugin_activation AJAX action, which makes it possible for attackers to activate arbitrary plugins present on the blog via a forged request if they can trick an administrator into performing an action such as clicking on a link.

The plugin contains a Missing Authorization vulnerability due to a missing capability check in the exopite-sof-file-batch-delete AJAX action, which makes it possible for authenticated attackers with a role as low as subscriber to delete arbitrary attachment.

The plugin contains a Missing Authorization vulnerability due to a missing capability check in the exopite-sof-file-batch-delete AJAX action, which makes it possible for authenticated attackers with a role as low as subscriber to delete arbitrary attachment.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.

The plugin contains a Cross-Site Scripting (XSS) vulnerability due to the plugin does not sanitize and escape some parameters, which makes it possible for authenticated users with a role as low as contributor to inject arbitrary web scripts into pages.