Full title: WordPress Ultimate Product Catalogue 3.1.2 XSS / CSRF / File Upload Vulnerabilities Category: web applications Platform: php WordPress Ultimate Product Catalogue plugin version 3.1.2 suffers from cross site request forgery, cross site scripting, and file upload vulnerabilities. # 0day.today @ http://0day.today/