plugin

Quick Post Widget Vulnerabilities

1 known security issue reported for the Quick Post Widget WordPress plugin. Most recent disclosed Aug 10, 2012.

1 medium

Running Quick Post Widget on your site? Check whether your installed version is affected.

Scan your site free

Quick Post Widget <= 1.9.1 - Multiple Cross-Site Scripting

medium

Multiple cross-site scripting (XSS) vulnerabilities in Quick Post Widget plugin 1.9.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) Title, (2) Content, or (3) New category field to wordpress/ or (4) query string to wordpress/.

CVSS:
6.1
Affected:
up to 1.9.1
Fix:
No patched version reported
Disclosed:
Aug 10, 2012

CVE-2012-4226 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database