WordPress Plugin Vulnerabilities

Simple Security <= 1.1.5 - 2 x Cross-Site Scripting (XSS)

Description

The Simple Security WordPress plugin was affected by a 2 x Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
simple-security
Fixed in 1.1.6

References

CVE
CVE-2014-9570
URL
https://packetstormsecurity.com/files/#129962/
URL
https://www.immuniweb.com/advisory/HTB23244
URL
https://seclists.org/bugtraq/2015/Jan/71

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
d25c61a5-bee7-40cd-80d6-a188875680c5

Timeline

Publicly Published
2015-01-14 (about 9 years ago)
Added
2015-01-14 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2022-11-02
Title
Jeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site Scripting
Published
2023-12-27
Title
Restaurant Reservations < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2014-08-01
Title
ReFlex Gallery 1.4.2 - Unspecified XSS
Published
2017-03-06
Title
WordPress 4.0-4.7.2 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds
Published
2016-04-12
Title
AJAX Random Post <= 2.00 - Unauthenticated Reflected Cross-Site Scripting (XSS)