Breadcrumbs By Menu Vulnerabilities

[en] The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Sep 3, 2019

CVE-2019-15864 on NVD →

[en] The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Sep 3, 2019

CVE-2019-15865 on NVD →

Cross-Site Scripting (XSS) vulnerability found in WordPress Breadcrumbs by menu plugin (versions <= 1.0.1).

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Jun 16, 2019

Cross-Site Request Forgery (CSRF) vulnerability found in WordPress Breadcrumbs by menu plugin (versions <= 1.0.1).

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Jun 16, 2019

The Breadcrumbs by menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to gain otherwise restricted access to administrative actions via a forged request...

CVSS:

8.8

Affected:

up to 1.0.1

Fixed in:

1.0.3

Disclosed:

Jun 8, 2019

CVE-2019-15865 on NVD →

The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.

CVSS:

6.1

Affected:

up to 1.0.3

Fixed in:

1.0.3

Disclosed:

Jun 8, 2019

CVE-2019-15864 on NVD →