Category: Security

WordPress Plugin DM Albums 1.9.2 vulnerabilitiesDM Albums™ is an inline photo album/gallery plugin that displays high quality images and thumbnails perfectly sized to your blog.
Two vulnerabilities have been made public:
1. Stack released  a “remote file disclosure vulnerability” (Low-Medium Risk Level)
2. Septemb0x released a “remote file include vulnerability” (Critical Risk Level)
An attacker could use these vulnerabilities to potentially gain full access […]

http://feedproxy.google.com/~r/BlogSecurity/~3/247nU9uI-Vw/wordpress-plugin-dm-albums-192-vulnerabilities

WordPress Plugin DM Albums 1.9.2 vulnerabilitiesDM Albums™ is an inline photo album/gallery plugin that displays high quality images and thumbnails perfectly sized to your blog.
Two vulnerabilities have been made public:
1. Stack released  a “remote file disclosure vulnerability” (Low-Medium Risk Level)
2. Septemb0x released a “remote file include vulnerability” (Critical Risk Level)
An attacker could use these vulnerabilities to potentially gain full access […]

http://feedproxy.google.com/~r/BlogSecurity/~3/247nU9uI-Vw/wordpress-plugin-dm-albums-192-vulnerabilities

WordPress Plugin Related Sites 2.1 Blind SQL Injection VulnerabilityA critical vulnerability has been discovered in the WordPress Plugin Related Sites plugin. An exploit is available in the wild and available on Milw0rm, making this attack easier to exploit.
Although, the vulnerability says that version 2.1 is vulnerable. You should assume previous versions are vulnerable as well.
BlogSec have confirmed that the current version (at the […]

http://feedproxy.google.com/~r/BlogSecurity/~3/iBQFl-UNtUM/wordpress-plugin-related-sites-21-blind-sql-injection-vulnerability

WordPress Plugin Related Sites 2.1 Blind SQL Injection VulnerabilityA critical vulnerability has been discovered in the WordPress Plugin Related Sites plugin. An exploit is available in the wild and available on Milw0rm, making this attack easier to exploit.
Although, the vulnerability says that version 2.1 is vulnerable. You should assume previous versions are vulnerable as well.
BlogSec have confirmed that the current version (at the […]

http://feedproxy.google.com/~r/BlogSecurity/~3/iBQFl-UNtUM/wordpress-plugin-related-sites-21-blind-sql-injection-vulnerability