Login

Tag Archives: WHIZZ

27 Mar 2017

Vulnerability Details: Cross-Site Request Forgery(CSRF)/User Deletion Vulnerability in WHIZZ

CFrom time to time vulnerabilities are fixed in plugin without someone putting out a report on the vulnerability and we will put out a post detailing the vulnerability. While putting out the details of the vulnerability increases the chances of it being exploited, it also can help to identify vulnerabilities that haven’t been fully fixed (in some cases not fixed at all) and help to identify additional vulnerabilities in the plugin.

…

[Read more]

27 Mar 2017

Vulnerability Details: Reflected Cross-Site Scripting (XSS) Vulnerability in WHIZZ

From time to time vulnerabilities are fixed in plugin without someone putting out a report on the vulnerability and we will put out a post detailing the vulnerability. While putting out the details of the vulnerability increases the chances of it being exploited, it also can help to identify vulnerabilities that haven’t been fully fixed (in some cases not fixed at all) and help to identify additional vulnerabilities in the plugin.

…

[Read more]

27 Mar 2017

Vulnerability Details: Cross-Site Request Forgery(CSRF)/Plugin Deletion Vulnerability in WHIZZ

From time to time vulnerabilities are fixed in plugin without someone putting out a report on the vulnerability and we will put out a post detailing the vulnerability. While putting out the details of the vulnerability increases the chances of it being exploited, it also can help to identify vulnerabilities that haven’t been fully fixed (in some cases not fixed at all) and help to identify additional vulnerabilities in the plugin.

…

[Read more]