Plugin Vulnerabilities Updates – Week of 2/19/2016
Plugin Vulnerabilities Added This Week
- Cross-site request forgery (CSRF)/cross-site scripting (XSS) in ALO EasyMail Newsletter, discovered by Mohsen Lotfi
- Authenticated arbitrary file upload in Backup Guard, discovered by James Golovich
- Cross-site request forgery (CSRF) in WooCommerce – Store Exporter, discovered by James Golovich
We released urgent Plugin updates to patch a privilege escalation vulnerability within 24 hours of notification, thanks panVagenas and jamesgol 🙂