Cross-Site Scripting Vulnerability in Social Connect Plugin by WordPress
CVE-2014-4551

Currently unrated

Key Information:

Vendor

Wordpress
Status
Social Connect
Vendor
CVE Published:
2 July 2014

What is CVE-2014-4551?

The Social Connect plugin for WordPress contains a vulnerability that allows attackers to exploit the diagnostics/test.php script. This allows remote attackers to inject arbitrary web scripts or HTML via a malicious testing parameter, potentially compromising the integrity of the website. Users of versions 1.0.4 and earlier are at risk, making it essential for admins to update or secure their installations to prevent such attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://codevigilant.com/disclosure/wp-plugin-social-conne...
x_refsource_MISC

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.