WordPress Plugin Vulnerabilities

Comment Extra Field 1.7 - CSRF / XSS

Description

The comment-extra-field WordPress plugin was affected by a CSRF / XSS security vulnerability.

Affects Plugins

Plugin icon
comment-extra-field
No known fix

References

URL
https://packetstormsecurity.com/files/#122625/
URL
https://brindi.si/g/blog/vulnerable-swf-bundled-in-wordpress-plugins.html

Miscellaneous

Verified
No
WPVDB ID
02cecd0d-65d5-45e7-93e2-c1b68c3729b8

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2016-03-07
Title
Custom Content Type Manager >= 0.9.8.8 - Multiple Vulnerabilities
Published
2019-06-09
Title
Download Manager <= 2.9.96 - Various Sanitisation Issues
Published
2019-08-12
Title
WP Social Feed Gallery < 2.4.8 - CSRF & Missing Authorisation Checks
Published
2019-09-30
Title
Theme Editor < 2.2 - Multiple Vulnerabilities
Published
2019-08-12
Title
Cforms & CformsII <= 15.0.1 - Unauthenticated HTML Injection & CSRF