WordPress Plugin Vulnerabilities

WP-ViperGB 1.3.10 - XSS Weakness & CSRF

Description

The WP-ViperGB WordPress plugin was affected by a XSS Weakness & CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-vipergb
Fixed in 1.3.11

References

CVE
CVE-2014-9460
URL
https://packetstormsecurity.com/files/#129501/
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/99439
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/99440

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
44912e17-a63a-42e2-9251-b9889f509dc7

Timeline

Publicly Published
2014-12-12 (about 11 years ago)
Added
2015-03-02 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2019-07-03
Title
Visitors Traffic Real Time Statistics < 1.13 - CSRF to Stored XSS/SQLi
Published
2016-11-15
Title
NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi
Published
2016-07-25
Title
Total Security < 3.4.1 - XSS & Settings Change
Published
2014-08-01
Title
Sniplets 1.1.2 - (RFI/XSS/RCE) Multiple Vulnerabilities
Published
2014-12-14
Title
Timed Popup <= 1.3 - CSRF & Stored XSS