Pwgrandom Vulnerabilities

Update the plugin. Manideep K discovered and reported this Multiple Vulnerabilities vulnerability in WordPress PWG Random Plugin. Multiple vulnerabilities were found. Due to the large number of vulnerabilities, this has been grouped in this category. This vulnerability has been fixed in version 1.12.

Affected:

up to 1.12

Fixed in:

1.12

Disclosed:

Dec 9, 2023

[en] Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) pwgrandom_title or (2) pwgrandom_category parameter in the...

Affected:

up to 1.11

Fixed in:

1.11

Disclosed:

Dec 31, 2014

CVE-2014-9394 on NVD →

Multiple cross-site request forgery (CSRF) vulnerabilities in the PWGRandom plugin 1.11 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) pwgrandom_title or (2) pwgrandom_category parameter in the pwgr...

CVSS:

8.8

Affected:

up to 1.11

Fix:

No patched version reported

Disclosed:

Dec 18, 2014

CVE-2014-9394 on NVD →

This plugin is prone to a cross site scripting and cross site request forgery attacks. The attackers can insert arbitrary script into admin page. Once exploited, admin’s browser can be made to do almost anything the admin user could typically do by hijacking admin's cookies . Parameters "pwgrandom_title," and pwgrandom...

Affected:

up to 1.12

Fixed in:

1.12

Disclosed:

Dec 9, 2014

The pwgrandom WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affected:

up to 1.11

Fix:

No patched version reported