plugin
5 known security issues reported for the Wp Roknewspager WordPress plugin. Most recent disclosed Sep 17, 2013.
Running Wp Roknewspager on your site? Check whether your installed version is affected.
Scan your site freeThe RokNewsPager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.17. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may...
The WordPress RokNewsPager plugin is vulnerable to Denial of Service via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.17. This makes it possible for unauthenticated attackers to slow the response time of the vulnerable service to an unusable speed and/or completely deny it.
The RokNewsPager plugin for WordPress is vulnerable to Full Path Disclosure in versions up to, and including, 1.17 via the 'src' parameter in the 'thumb.php' and 'roknewspager.php' files. This can allow unauthenticated attackers to extract otherwise restricted system file paths.
The RokNewsPager plugin for WordPress is vulnerable to Cross-Site Scripting via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute...
The WordPress RokNewsPager plugin is vulnerable to Abuse of Functionality via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.17. This makes it possible for unauthenticated attackers to use implemented functions for unintended/malicious reasons.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free