WordPress Plugin Vulnerabilities

Tag Miner < 1.1.5 - Cross-Site Request Forgery (CSRF) & XSS

Description

The Tag Miner (Automatic Tag Extraction) WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) & XSS security vulnerability.

Affects Plugins

Plugin icon
fossura-tag-miner
Fixed in 1.1.5

References

CVE
CVE-2016-10979
CVE
CVE-2016-10978

Miscellaneous

Submitter
pvdl
Verified
No
WPVDB ID
78153fab-b03b-489b-9618-5a29b7b66bc6

Timeline

Publicly Published
2015-08-18 (about 10 years ago)
Added
2016-05-05 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-11-26
Title
WP Symposium <= 14.10 - XSS & SQL Injection
Published
2015-10-27
Title
Crony Cronjob Manager < 0.4.7 - Cross-Site Scripting (XSS) & CSRF
Published
2021-04-13
Title
Video Downloader for TikTok < 1.4 - Server Side Request Forgery (SSRF) & Local File Inclusion (LFI)
Published
2014-08-01
Title
WordPress <= 3.3.2 wp-admin/media-upload.php sensitive information disclosure or bypass
Published
2014-08-01
Title
Multiple vulnerabilities in Chocolate WP theme for WordPress