When scanned with wpscan my site gives an alarm on WP-postviews

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Lester Chan

    (@gamerz)

    9 years, 3 months ago

    The title states “WordPress post-views Plugin” and not WP-PostViews.

    “Input passed via the “search_input” GET parameter to wp-admin/index.php (when “page” is set to “post-views”) is not properly sanitised in wp-content/plugins/post-views/post-views.php before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user’s browser session in context of an affected site.”

    The plugin uses wp-content/plugins/wp-postviews and not “wp-content/plugins/post-views”

    So you got the wrong plugin.

    ethicalhack3r

    (@ethicalhack3r)

    9 years, 3 months ago

    I manage the WPScan Vulnerability Database. It looks like the vulnerability was assigned to the wrong plugin within our database. I will update the issue now.

    Thread Starter ahmetax

    (@ahmetax)

    9 years, 3 months ago

    Ok. Then we will not get a vulnerability message from now on.
    Thank you.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘When scanned with wpscan my site gives an alarm on WP-postviews’ is closed to new replies.