Wordpress Multiple Third Party Plugins Multiple Vulnerabilities
Description
(#Several vulnerabilities have been identified in third-party plugins for WordPress:#- Robo Gallery: remote code execution#- Woocommerce product options: file upload#- Stop User Enumeration: username enumeration bypass##Several cross-site scripting in the following third-party plugins:#- MW Font Changer#- S3 Video Plugin#- Admin Font Editor (CVE-2016-1000126)#- Infusionsoft Gravity Forms (CVE-2016-1000139)#- MiniMax#- WPSOLR#- Tidio Gallery#- CSV Import##Proof of concepts are available.)
Vulnerable Products
Vulnerable Software: WordPress (WordPress) -
Solution
Version 1.5.12 of Infusionsoft Gravity Forms fixes the vulnerability affecting it (CVE-2016-1000139).
