WordPress Plugin Vulnerabilities

Breadcrumbs by menu < 1.0.3 - Multiple Issues

Description

XSS, CSRF leading to options update

Affects Plugins

Plugin icon
breadcrumbs-by-menu
Fixed in 1.0.3

References

CVE
CVE-2019-15865
CVE
CVE-2019-15864
URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2102688%40breadcrumbs-by-menu&old=1043982%40breadcrumbs-by-menu

Miscellaneous

Verified
No
WPVDB ID
ef383a37-9754-4e37-a3e2-93e5c5c0d164

Timeline

Publicly Published
2019-06-08 (about 6 years ago)
Added
2019-06-12 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2015-06-04
Title
zM Ajax Login & Register 1.0.9 - Local File Inclusion & XSS
Published
2014-08-01
Title
Pinterest "Pin It" Button Lite 1.3.1 - Multiple Unspecified Vulnerabilities
Published
2015-04-29
Title
TheCartPress < 1.3.9.3 - Multiple Vulnerabilities
Published
2020-01-17
Title
Marketo Forms and Tracking <= 1.0.2 - CSRF to XSS
Published
2019-09-08
Title
Selio - Real Estate Directory <= 1.1 - SQL Injection & Persistent XSS