Description
WordPress Plugin Free Responsive Post/Article Author Section for WordPress-Ultimate Author Box Lite [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin Free Responsive Post/Article Author Section for WordPress-Ultimate Author Box Lite version 1.1.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.1.3 or latest
References
Related Vulnerabilities
WordPress Plugin Slider by 10Web-Responsive Image Slider Unspecified Vulnerability (1.1.9)
WordPress Plugin ND Shortcodes For Visual Composer Security Bypass (5.8)
PostgreSQL Improper Authentication Vulnerability (CVE-2007-6601)
WordPress Plugin GD bbPress Attachments Cross-Site Scripting (2.5)
WordPress Plugin FV Flowplayer Video Player Cross-Site Request Forgery (7.5.30.7210)