WordPress Plugin Vulnerabilities

Welcart < 1.2.2 - XSS & CSRF

Description

The Failure WordPress plugin was affected by a XSS & CSRF security vulnerability.

Affects Plugins

Plugin icon
welcart
Fixed in 1.2.2

References

CVE
CVE-2012-5177
CVE
CVE-2012-5178
URL
https://jvn.jp/en/jp/JVN18731696/
URL
https://jvndb.jvn.jp/jvndb/JVNDB-2012-000108
URL
https://jvn.jp/en/jp/JVN53269985/
URL
https://jvndb.jvn.jp/jvndb/JVNDB-2012-000109

Miscellaneous

Verified
No
WPVDB ID
34241074-3d95-41cb-9e19-1678fc2a10bf

Timeline

Publicly Published
2012-12-14 (about 13 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2019-06-27
Title
Block WP Login < 1.3.2 - CSRF and Unauthorised Settings Update
Published
2020-01-02
Title
Postie < 1.9.41 - Post Submission Spoofing & Stored Cross-Site Scripting (XSS)
Published
2015-05-15
Title
My Calendar <= 2.3.29 - Arbitrary File Override & Reflected XSS
Published
2014-04-25
Title
iMember360is 3.9.001 - XSS / Disclosure / Code Execution
Published
2014-08-01
Title
WordPress <= 3.3.2 wp-admin/media-upload.php sensitive information disclosure or bypass