Vulnerabilities and Security Researches

Dynamic Widgets, CVE-2015-9437

CVE, Research URL: CVE-2015-9437
Home page URL: Security reports for Dynamic Widgets
Application: Dynamic Widgets
Published on: Sep 26, 2019
Research Description: The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
Affected versions: max 1.5.11.
Status: vulnerable