The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php.
View Full Alert
Related Posts
CVE-2014-10376The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection. View Full Alert
CVE-2014-10381The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. View Full Alert
CVE-2014-10375handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header. View Full Alert