Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin FancyBox for WordPress Security Bypass - CVE-2015-1494 - Vulnerability Database
WP Plugin Fancybox For Wordpress

WordPress Plugin FancyBox for WordPress Security Bypass - CVE-2015-1494

High
Reference: CVE-2015-1494
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-1494
Title: WordPress Plugin FancyBox for WordPress Security Bypass
Overview:

WordPress Plugin FancyBox for WordPress is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently inject malicious Javascript payloads (malware) on the affected website. WordPress Plugin FancyBox for WordPress version 3.0.2 is vulnerable prior versions may also be affected.