cve archivos - SecurityTrooper

My first CVE by 2018 CVE-2018-5316

Posted on February 9, 2018 by adm1n

Though the vulnerability I tracked her down last year. Mitre has decided to assign it to me this year 2018. The CVE is based on a Cross-site scripting in the plugin “SagePay Server Gateway for WooCommerce” version 1.0.7. This vulnerability… Continue Reading →

Duplicator Migration (XSS) CVE-2017-16815

Posted on December 18, 2017 by adm1n

I keep finding Cross-site scripting in wordpress plugins, I’m going to have to automate it somehow:). In this case in a plugin called “Duplicator Migration” version 1.2.28 (https://es.wordpress.org/plugins/duplicator/) which is active in more than 1 million wordpress and is developed… Continue Reading →