Monday, November 12, 2012

Vulnerabilities in WP E-Commerce plugin for WordPress


DefenseCode released Security Advisory DC-2012-11-001 to address an issue that affects Wordpress WP E-Commerce Plugin, one which has more than 2 million downloads and is one of the most popular for WordPress. Advisory covered multiple vulnerabilities that were discovered during the security audit of the mentioned plugin. All vulnerabilities were discovered using DefenseCode's ThunderScan PHP, web application source code security analyzer. Bugs found by ThunderScan are High risk SQL injections and Cross Site Scripting which attacker can use to compromise the targeted system. DefenseCode has contacted the vendor and the vulnerabilities are fixed in the latest WP e-Commerce release (3.8.9.1).

You can find more details about the advisory here.

Soon, we’ll release a lot more vulnerabilities discovered by our ThunderScan software. Also, we’ll release a few interesting 0day vulnerabilities not related to web applications, so make sure that you’re subscribed to our RSS feed.

Regards,
DefenseCode

16 comments:

  1. Because of the modifying planet along with continual completely new information security research papers engineering that you can get, professionals must have to know the specific engineering which could boost success in their corporation.

    ReplyDelete
  2. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    http://www.jualobataborsiherbal.com/ obat aborsi
    http://caramenggugurkankandungan.info/ cara menggugurkan kandungan
    http://www.jualobataborsiherbal.com/cara-menggugurkan-kandungan/ cara menggugurkan kandungan
    http://jualobatpenggugurkandungan.net/ obat penggugur kandungan
    http://tandatandakehamilan.net/ tanda tanda kehamilan
    http://tandatandakehamilan.net/cara-cepat-dan-selamat-menggugurkan-kandungan/ cara menggugurkan kandungan
    http://obataborsi59.com/ obat aborsi
    http://obattelatdatangbulan.info/ obat telat datang bulan
    http://klinikobataborsi.com/ jual obat aborsi

    ReplyDelete
  3. Aside from the reliability of the brand, the best e-commerce business solutions are also well and heavily advertised. blackbird software services

    ReplyDelete
  4. The article you have shared here very good. This is really interesting information for me. Thanks for sharing!
    hotmail login |hotmail sign in |free hotmail login

    ReplyDelete
  5. فرصة لسكان واهل المدينة المنورة الان بالمدينة المنورة شركة شراء اثاث مستعمل بالمدينة المنورة
    متخصصون فى شراء جميع انواع اثاث وعفش المنازل المستعمل بالمدينة المنورة نشترى غرف النوم المستعملة
    نشترى اطقم الكنب المستعملة والبطرمة والسجاد وشراء الاجهزة الكهربائية المستعملة شراء المطابخ
    بافضل اسعار السوق شراء الاثاث الميتعمل بالمدينة المنورة اتصل بنا يصلك مندوبنا نقوم بتحميل الاثاث
    المستعمل بايدى عمالنا وندفع لك ثمن اثاثك فى يدك بمجردالاتصال بنا


    شركة شراء اثاث مستعمل بالمدينه المنوره


    https://www.facebook.com/mostamalco

    الاثاث المستعمل بالمدينة المنورة

    شراء الاثاث المستعمل بالمدينة المنورة


    شراء الاثاث المستعمل بالمدينة المنورة


    شراء الاثاث المستعمل بالمدينة المنورة




    شركة شراء اثاث مستعمل بالمدينه المنوره



    شركة شراء اثاث مستعمل بالطائف

    شراء الاثاث المستعمل بالطائف



    شركة شراء اثاث مستعمل بتبوك
    شراء الاثاث المستعمل بتبوك




    شركة شراء اثاث مستعمل بالمنطقة الشرقية بالدمام والخبر
    شراء الاثاث المستعمل بالدمام



    شراء الاثاث المستعمل باالخبر


    شراء الاثاث المستعمل بالدمام


    ReplyDelete
  6. Aspiring to become an amazing blog writer like the writer of this blog.
    OMC cobra parts

    ReplyDelete
  7. By reading this article I get a lot of lessons and this is very useful . cara menggugurkan kandungan

    ReplyDelete
  8. Great blog and you are always provided with access to provide useful information like this to us.

    word-cookies-answers.com

    ReplyDelete
  9. I love to read this post and found this website very beneficial
    I also have Blog on Happy wheels where you enjoy Free Happy Wheels Game
    happy wheels||happywheels.in||happy wheels game||fireboy and watergirl

    ReplyDelete
  10. I am aware that everybody must say precisely the same thing, but I just feel that you set it inside a way that everyone can comprehend. If you want click here for games

    ReplyDelete
  11. You don't need to spend a fortune getting a website developed for you. You can do it yourself, even if you have never had any experience. Thankfully, there is a secret - WordPress. https://edkentmedia.com/website-design-toronto

    ReplyDelete
  12. Congrats you individuals are doing with this blog site. print profits bonuses

    ReplyDelete