Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9303 State: PUBLISHED Published: 2019-08-12T15:40:33 Last Updated: 2024-08-06T08:43:42.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/simple-share-buttons-adder/#developers
CVE ID: CVE-2015-9304 State: PUBLISHED Published: 2019-08-12T15:23:04 Last Updated: 2024-08-06T08:43:42.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9764
CVE ID: CVE-2015-9305 State: PUBLISHED Published: 2019-08-12T14:51:50 Last Updated: 2024-08-06T08:43:42.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-map-plugin/#developers
CVE ID: CVE-2015-9306 State: PUBLISHED Published: 2019-08-12T14:41:35 Last Updated: 2024-08-06T08:43:42.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-ultimate-csv-importer/#developers
CVE ID: CVE-2015-9307 State: PUBLISHED Published: 2019-08-14T15:24:45 Last Updated: 2024-08-06T08:43:42.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-map-plugin/#developers - https://wpvulndb.com/vulnerabilities/9766
CVE ID: CVE-2015-9308 State: PUBLISHED Published: 2019-08-14T15:23:11 Last Updated: 2024-08-06T08:43:42.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-map-plugin/#developers - https://wpvulndb.com/vulnerabilities/9766
CVE ID: CVE-2015-9309 State: PUBLISHED Published: 2019-08-14T15:22:44 Last Updated: 2024-08-06T08:43:42.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-google-map-plugin/#developers - https://wpvulndb.com/vulnerabilities/9766
CVE ID: CVE-2015-9310 State: PUBLISHED Published: 2019-08-14T15:17:55 Last Updated: 2024-08-06T08:43:42.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#developers
CVE ID: CVE-2015-9311 State: PUBLISHED Published: 2019-08-14T14:54:52 Last Updated: 2024-08-06T08:43:42.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2015-9312 State: PUBLISHED Published: 2019-08-14T14:54:08 Last Updated: 2024-08-06T08:43:42.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2015-9313 State: PUBLISHED Published: 2019-08-14T14:53:16 Last Updated: 2024-08-06T08:43:42.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2015-9314 State: PUBLISHED Published: 2019-08-14T14:52:46 Last Updated: 2024-08-06T08:43:42.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2015-9315 State: PUBLISHED Published: 2019-08-14T14:51:56 Last Updated: 2024-08-06T08:43:42.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newstatpress plugin before 1.0.1 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newstatpress/#developers
CVE ID: CVE-2015-9316 State: PUBLISHED Published: 2019-08-14T14:48:11 Last Updated: 2024-08-06T08:43:42.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-fastest-cache/#developers - https://www.exploit-db.com/exploits/38678
CVE ID: CVE-2015-9317 State: PUBLISHED Published: 2019-08-20T14:34:46 Last Updated: 2024-08-06T08:43:42.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/awesome-support/#developers
CVE ID: CVE-2015-9318 State: PUBLISHED Published: 2019-08-20T14:47:21 Last Updated: 2024-08-06T08:43:42.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/awesome-support/#developers
CVE ID: CVE-2015-9319 State: PUBLISHED Published: 2019-08-20T15:19:23 Last Updated: 2024-08-06T08:43:42.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gregs-high-performance-seo/#developers
CVE ID: CVE-2015-9320 State: PUBLISHED Published: 2019-08-20T15:42:08 Last Updated: 2024-08-06T08:43:42.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/option-tree/#developers - https://wpvulndb.com/vulnerabilities/9769
CVE ID: CVE-2015-9321 State: PUBLISHED Published: 2019-08-21T11:49:23 Last Updated: 2024-08-06T08:43:42.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/shortcode-factory/#developers
CVE ID: CVE-2015-9322 State: PUBLISHED Published: 2019-08-16T20:19:50 Last Updated: 2024-08-06T08:43:42.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/erident-custom-login-and-dashboard/#developers
CVE ID: CVE-2015-9323 State: PUBLISHED Published: 2019-08-16T20:12:59 Last Updated: 2024-08-06T08:43:42.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/404-to-301/#developers - https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2015-9323
CVE ID: CVE-2015-9324 State: PUBLISHED Published: 2019-08-16T20:10:59 Last Updated: 2024-08-06T08:43:42.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/easy-digital-downloads/#developers - https://wpvulndb.com/vulnerabilities/9770
CVE ID: CVE-2015-9325 State: PUBLISHED Published: 2019-08-16T13:41:16 Last Updated: 2024-08-06T08:43:42.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The visitors-online plugin before 0.4 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/visitors-online/#developers
CVE ID: CVE-2015-9326 State: PUBLISHED Published: 2019-08-16T13:40:28 Last Updated: 2024-08-06T08:43:42.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-business-intelligence-lite/#developers
CVE ID: CVE-2015-9327 State: PUBLISHED Published: 2019-08-21T17:48:26 Last Updated: 2024-08-06T08:43:42.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/flickr-justified-gallery/#developers
CVE ID: CVE-2015-9328 State: PUBLISHED Published: 2019-08-21T17:45:20 Last Updated: 2024-08-06T08:43:42.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The profile-builder plugin before 2.2.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/profile-builder/#developers
CVE ID: CVE-2015-9329 State: PUBLISHED Published: 2019-08-20T14:59:55 Last Updated: 2024-08-06T08:43:42.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers
CVE ID: CVE-2015-9330 State: PUBLISHED Published: 2019-08-20T14:59:05 Last Updated: 2024-08-06T08:43:42.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers
CVE ID: CVE-2015-9331 State: PUBLISHED Published: 2019-08-20T14:58:18 Last Updated: 2024-08-06T08:43:42.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers
CVE ID: CVE-2015-9332 State: PUBLISHED Published: 2019-08-20T14:51:01 Last Updated: 2024-08-06T08:43:42.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/uninstall/#developers
CVE ID: CVE-2015-9333 State: PUBLISHED Published: 2019-08-22T12:13:53 Last Updated: 2024-08-06T08:43:42.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cforms2 plugin before 14.6.10 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cforms2/#developers - https://wpvulndb.com/vulnerabilities/9773
CVE ID: CVE-2015-9334 State: PUBLISHED Published: 2019-08-22T19:45:31 Last Updated: 2024-08-06T08:43:42.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: The email-newsletter plugin through 20.15 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/email-newsletter/#developers - https://wordpress.org/support/topic/susceptible-to-sql-injection-attack/ - https://wordpress.org/plugins/email-newsletter/advanced/
CVE ID: CVE-2015-9335 State: PUBLISHED Published: 2019-08-22T12:17:21 Last Updated: 2024-08-06T08:43:42.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/limit-attempts/#developers
CVE ID: CVE-2015-9336 State: PUBLISHED Published: 2019-08-22T12:20:43 Last Updated: 2024-08-06T08:43:42.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The clean-login plugin before 1.5.1 for WordPress has reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/clean-login/#developers
CVE ID: CVE-2015-9337 State: PUBLISHED Published: 2019-08-22T13:40:52 Last Updated: 2024-08-06T08:43:42.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/profile-builder/#developers
CVE ID: CVE-2015-9338 State: PUBLISHED Published: 2019-08-22T19:03:55 Last Updated: 2024-08-06T08:43:42.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-file-upload/#developers
CVE ID: CVE-2015-9339 State: PUBLISHED Published: 2019-08-22T19:02:27 Last Updated: 2024-08-06T08:43:42.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-file-upload/#developers
CVE ID: CVE-2015-9340 State: PUBLISHED Published: 2019-08-22T19:01:24 Last Updated: 2024-08-06T08:43:42.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-file-upload/#developers
CVE ID: CVE-2015-9341 State: PUBLISHED Published: 2019-08-22T19:00:32 Last Updated: 2024-08-06T08:43:42.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-file-upload/#developers
CVE ID: CVE-2015-9342 State: PUBLISHED Published: 2019-08-27T11:20:49 Last Updated: 2024-08-06T08:43:42.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-rollback plugin before 1.2.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-rollback/#developers
CVE ID: CVE-2015-9343 State: PUBLISHED Published: 2019-08-27T11:21:39 Last Updated: 2024-08-06T08:43:42.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-rollback plugin before 1.2.3 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-rollback/#developers
CVE ID: CVE-2015-9344 State: PUBLISHED Published: 2019-08-27T11:27:26 Last Updated: 2024-08-06T08:43:42.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: The link-log plugin before 2.1 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/link-log/#developers
CVE ID: CVE-2015-9345 State: PUBLISHED Published: 2019-08-27T11:34:26 Last Updated: 2024-08-06T08:43:42.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: The link-log plugin before 2.0 for WordPress has HTTP Response Splitting. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/link-log/#developers
CVE ID: CVE-2015-9346 State: PUBLISHED Published: 2019-08-27T11:49:53 Last Updated: 2024-08-06T08:43:42.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cp-polls plugin before 1.0.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/cp-polls/#developers
CVE ID: CVE-2015-9347 State: PUBLISHED Published: 2019-08-27T11:51:59 Last Updated: 2024-08-06T08:43:42.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-plotly/#developers
CVE ID: CVE-2015-9348 State: PUBLISHED Published: 2019-08-27T12:21:56 Last Updated: 2024-08-06T08:43:42.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/sell-downloads/#developers
CVE ID: CVE-2015-9349 State: PUBLISHED Published: 2019-08-27T12:00:11 Last Updated: 2024-08-06T08:43:42.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ckeditor-for-wordpress/#developers
CVE ID: CVE-2015-9350 State: PUBLISHED Published: 2019-08-27T12:02:17 Last Updated: 2024-08-06T08:43:42.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/feed-them-social/#developers
CVE ID: CVE-2015-9351 State: PUBLISHED Published: 2019-08-27T12:01:31 Last Updated: 2024-08-06T08:51:03.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/feed-them-social/#developers
CVE ID: CVE-2015-9352 State: PUBLISHED Published: 2019-08-27T12:05:41 Last Updated: 2024-08-06T08:51:03.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-polls plugin before 2.72 for WordPress has SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-polls/#developers
CVE ID: CVE-2015-9353 State: PUBLISHED Published: 2019-08-28T11:07:41 Last Updated: 2024-08-06T08:51:03.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gigpress/#developers
CVE ID: CVE-2015-9354 State: PUBLISHED Published: 2019-08-28T11:08:29 Last Updated: 2024-08-06T08:51:03.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gigpress plugin before 2.3.11 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/gigpress/#developers
CVE ID: CVE-2015-9355 State: PUBLISHED Published: 2019-08-28T11:16:29 Last Updated: 2024-08-06T08:51:03.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/two-factor-authentication/#developers
CVE ID: CVE-2015-9356 State: PUBLISHED Published: 2019-08-28T11:20:03 Last Updated: 2024-08-06T08:51:03.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-vipergb/#developers - https://make.wordpress.org/plugins/2015/04/20/fixing-add_query_arg-and-remove_query_arg-usage/
CVE ID: CVE-2015-9357 State: PUBLISHED Published: 2019-08-28T11:42:02 Last Updated: 2024-08-06T08:51:03.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The akismet plugin before 3.1.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/akismet/#developers
CVE ID: CVE-2015-9358 State: PUBLISHED Published: 2019-08-28T11:43:51 Last Updated: 2024-08-06T08:51:03.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/feedwordpress/#developers
CVE ID: CVE-2015-9359 State: PUBLISHED Published: 2019-08-28T14:23:20 Last Updated: 2024-08-06T08:51:03.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://jetpack.com/2015/04/20/jetpack-3-4-3-coordinated-security-update/
CVE ID: CVE-2015-9360 State: PUBLISHED Published: 2019-08-28T11:50:44 Last Updated: 2024-08-06T08:51:05.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://updraftplus.com/new-security-vulnerability-found-across-significant-numbers-of-wordpress-plugins-including-updraftplus/
CVE ID: CVE-2015-9361 State: PUBLISHED Published: 2019-08-28T11:53:40 Last Updated: 2024-08-06T08:51:03.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://www.barrykooij.com/several-security-updates-released/
CVE ID: CVE-2015-9362 State: PUBLISHED Published: 2019-08-28T11:54:30 Last Updated: 2024-08-06T08:51:03.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://www.barrykooij.com/several-security-updates-released/