plugin
13 known security issues reported for the Wp Rokstories WordPress plugin. Most recent disclosed May 15, 2015.
Running Wp Rokstories on your site? Check whether your installed version is affected.
Scan your site freeThis plugin is prone to cross site scripting, denial of service, full path disclosure and arbitrary file upload vulnerabilities. Update plugin.
The RokStories plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may ma...
The RokStories plugin for WordPress is vulnerable to Full Path Disclosure in versions up to, and including, 1.25 via the 'src' parameter in the 'thumb.php' and 'rokstories.php' files. This can allow unauthenticated attackers to extract otherwise restricted system file paths.
The WordPress RokStories plugin is vulnerable to Abuse of Functionality via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to use implemented functions for unintended/malicious reasons.
The RokStories plugin for WordPress is vulnerable to Cross-Site Scripting via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...
The WordPress RokStories plugin is vulnerable to Denial of Service via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to slow the response time of the vulnerable service to an unusable speed and/or completely deny it.
WordPress RokStories plugin's "thumb.php" is prone to multiple security vulnerabilities, such as an arbitrary file-upload, cross-site scripting, information disclosure and denial-of-service vulnerabilities. Because of these issues, attackers can execute arbitrary script code in the browser of an unsuspecting user in t...
The WordPress RokStories plugin is vulnerable to Abuse of Functionality via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to use implemented functions for unintended/malicious reasons.
The RokStories plugin for WordPress is vulnerable to Full Path Disclosure in versions up to, and including, 1.25 via the 'src' parameter in the 'thumb.php' and 'rokstories.php' files. This can allow unauthenticated attackers to extract otherwise restricted system file paths.
The RokStories plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may ma...
The WordPress RokStories plugin is vulnerable to Denial of Service via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25. This makes it possible for unauthenticated attackers to slow the response time of the vulnerable service to an unusable speed and/or completely deny it.
The RokStories plugin for WordPress is vulnerable to Cross-Site Scripting via the 'src' parameter in the 'thumb.php' file in versions up to, and including, 1.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute i...
The wp_rokstories WordPress plugin was affected by a XSS,DoS,Disclosure,Upload Vulnerabilities security vulnerability.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free