WordPress Plugin Vulnerabilities

xPinner Lite <= 2.2 - Cross-Site Scripting (XSS) & CSRF

Description

The xpinner-lite WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
xpinner-lite
No known fix

References

CVE
CVE-2015-9408
CVE
CVE-2015-9407
URL
https://packetstormsecurity.com/files/#133593/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
Yes
WPVDB ID
42dd26cf-f7ba-46e6-99df-6f75e2fdb84a

Timeline

Publicly Published
2015-09-17 (about 10 years ago)
Added
2015-09-20 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-09-04
Title
Memphis Documents Library < 3.0 - Multiple Issues
Published
2019-08-03
Title
Rencontre < 3.2.2 - Authenticated Stored XSS via facebook parameter & SQL Injection
Published
2015-03-16
Title
Ultimate Member < 1.0.84 - Multiple Vulnerabilities
Published
2015-05-25
Title
WordPress Landing Pages <= 1.8.4 - XSS & SQL Injection
Published
2014-02-27
Title
VideoWhisper Live Streaming Integration 4.27.3 - Multiple Vulnerabilities