WordPress Plugin Vulnerabilities

WP Shop <= 3.4.3.18 - Cross-Site Scripting (XSS) & CSRF

Description

The WP Shop WordPress plugin was affected by a Cross-Site Scripting (XSS) & CSRF security vulnerability.

Affects Plugins

Plugin icon
wp-shop-original
Fixed in 3.4.3.19

References

URL
https://packetstormsecurity.com/files/#133592/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
Yes
WPVDB ID
a1c6062c-01b1-4d2e-b2fb-5c3256f5dfcb

Timeline

Publicly Published
2015-09-17 (about 10 years ago)
Added
2015-09-18 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2015-05-13
Title
Contact Form To Email <= 1.1.4 - CSRF & XSS
Published
2014-08-06
Title
wpSS <= 0.62 - SQL Injection & XSS
Published
2019-06-15
Title
Dropshix < 4.0.14 - Arbitrary Product Import
Published
2015-05-25
Title
WordPress Landing Pages <= 1.8.4 - XSS & SQL Injection
Published
2019-06-24
Title
Custom CSS Pro <= 1.0.3 - CSRF & XSS