plugin

Ajax Random Post Vulnerabilities

2 known security issues reported for the Ajax Random Post WordPress plugin. Most recent disclosed Oct 10, 2016.

1 medium

Running Ajax Random Post on your site? Check whether your installed version is affected.

Scan your site free

AJAX Random Post [ajax-random-post] < 2.01 (closed)

unknown

[en] Reflected XSS in wordpress plugin ajax-random-post v2.00

Affected:: up to 2.01
Fixed in:: 2.01
Disclosed:: Oct 10, 2016

CVE-2016-1000127 on NVD →

AJAX Random Post <= 2.0.0 - Reflected Cross-Site Scripting

medium

The AJAX Random Post plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the interval and count parameters in versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pag...

CVSS:: 6.1
Affected:: up to 2.00
Fix:: No patched version reported
Disclosed:: Feb 9, 2016

CVE-2016-1000127 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database