cleantalk
Vulnerabilities and Security Researches

leenk.me, 753d31765913b4d2dbb8af0a5512e5f1f8c70c61

Application

leenk.me

Published on
Apr 18, 2016
Research Description
leenk.me [leenkme] < 2.5.1 (closed) WordPress leenk.me Plugin 2.5.0 - Multiple Vulnerabilities This WordPress leenk.me plugin is prone to cross-site request forgery and cross-site scripting vulnerabilities via vulnerable page: wp-content/plugins/leenkme/facebook.php. Also, there are vulnerable fields: "facebook_message", "facebook_description", "default_image", "facebook_linkname", etc. Upgrade the plugin.
Affected versions
max 2.5.1.
Status
vulnerable