Vulnerability Bulletins

Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerability in Traffic Manager

   
Affected software Wordpress
 
https://www.pluginvulnerabilities.com/2017/08/30/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-traffic-manager/We recently started proactively monitoring for evidence of some high risk vulnerabilities when changes are made to WordPress plugins and if we had more customers we could expand the proactive monitoring to more types of vulnerabilities. In doing that we sometimes find that the possible vulnerable code isn’t exploitable, but we find another vulnerability

More info:

https://www.pluginvulnerabilities.com/2017/08/30/cross-site-request-forgery-csrfcross-site-scripting-xss-vulnerability-in-traffic-manager/