Full title: Google Alert And Twitter WP Plugin v. 3.1.5 XSS Exploit & SQL Injection 
Category: web applications
Platform: linux
Wordpress plugin vulnerable to XSS and SQL Injection.  These pages can be called directly and do not require any rights to access.

# 0day.today @ http://0day.today/