Blog - Spider Sec Ltd

November 9, 2023November 9, 2023Blog

How To Fix “Video outside the viewport” Indexing Issue

In this post I am going to discuss how to fix the “video outside the viewport” indexing issue / error which is […]

November 1, 2023December 13, 2023Blog

WordPress Penetration Test – Client Case Study

In the ever-evolving landscape of cybersecurity, WordPress stands as one of the most popular content management systems (CMS) in the world. Its […]

February 3, 2020August 23, 2025Blog, Vulnerability Discovery

Multiple Authenticated Stored XSS in NinjaForms Settings Page (Version 3.4.22 )

Authenticated Stored XSS in NinjaForms Settings Page (Version 3.4.22 ) Background A consultant at Spider Sec Ltd identified a critical vulnerability […]

January 30, 2020August 23, 2025Blog, Vulnerability Discovery

Registration Magic Multiple Unauthenticated XSS Vulnerabilities (Version 4.6.0.0)

Registration Magic Version 4.6.0.0 (Multiple XSS Vulnerabilities) Background After discovering two new WordPress Plugin vulnerabilities on a recent web application penetration test […]

January 21, 2020August 23, 2025Blog, Vulnerability Discovery

Calculated Fields Form WP Plugin (Version <= 1.0.353) Authenticated Stored XSS

Calculated Fields Form WP Plugin (Version <= 1.0.353) Multiple Authenticated Stored XSS Background The Calculated Fields Form plugin through 1.0.353 for WordPress […]

January 16, 2020August 23, 2025Blog, Vulnerability Discovery

Chained Quiz WP Plugin Unauthenticated Reflected XSS (Version 1.1.8.1)

Chained Quiz WP Plugin Unauthenticated Reflected XSS (Version 1.1.8.1) Background During a web application penetration testing engagement, we discovered our client was […]