Pay With Tweet Vulnerabilities

[en] Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.

Affected:

up to 1.2

Fixed in:

1.2

Disclosed:

Oct 9, 2012

CVE-2012-5349 on NVD →

[en] SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.

Affected:

up to 1.2

Fixed in:

1.2

Disclosed:

Oct 9, 2012

CVE-2012-5350 on NVD →

SQL injection vulnerability in the Pay With Tweet plugin before 1.2 for WordPress allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the id parameter in a paywithtweet shortcode.

CVSS:

8.8

Affected:

up to 1.1

Fixed in:

1.2

Disclosed:

Jan 6, 2012

CVE-2012-5350 on NVD →

Multiple cross-site scripting (XSS) vulnerabilities in pay.php in the Pay With Tweet plugin before 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) title, or (3) dl parameter.

CVSS:

6.1

Affected:

up to 1.1

Fixed in:

1.2

Disclosed:

Jan 6, 2012

CVE-2012-5349 on NVD →