Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9363 State: PUBLISHED Published: 2019-08-28T11:56:55 Last Updated: 2024-08-06T08:51:03.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9364 State: PUBLISHED Published: 2019-08-28T11:57:46 Last Updated: 2024-08-06T08:51:05.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9365 State: PUBLISHED Published: 2019-08-28T11:58:26 Last Updated: 2024-08-06T08:51:05.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9366 State: PUBLISHED Published: 2019-08-28T11:59:26 Last Updated: 2024-08-06T08:51:04.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9367 State: PUBLISHED Published: 2019-08-28T12:00:08 Last Updated: 2024-08-06T08:51:03.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9368 State: PUBLISHED Published: 2019-08-28T12:00:50 Last Updated: 2024-08-06T08:51:03.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9369 State: PUBLISHED Published: 2019-08-28T12:01:31 Last Updated: 2024-08-06T08:51:05.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9370 State: PUBLISHED Published: 2019-08-28T12:02:14 Last Updated: 2024-08-06T08:51:03.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9371 State: PUBLISHED Published: 2019-08-28T12:02:51 Last Updated: 2024-08-06T08:51:05.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9372 State: PUBLISHED Published: 2019-08-28T12:03:30 Last Updated: 2024-08-06T08:51:03.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9373 State: PUBLISHED Published: 2019-08-28T12:04:06 Last Updated: 2024-08-06T08:51:03.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9374 State: PUBLISHED Published: 2019-08-28T12:04:48 Last Updated: 2024-08-06T08:51:04.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9375 State: PUBLISHED Published: 2019-08-28T12:05:26 Last Updated: 2024-08-06T08:51:05.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9376 State: PUBLISHED Published: 2019-08-28T12:06:12 Last Updated: 2024-08-06T08:51:05.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9377 State: PUBLISHED Published: 2019-08-28T12:06:56 Last Updated: 2024-08-06T08:51:04.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9378 State: PUBLISHED Published: 2019-08-28T12:07:30 Last Updated: 2024-08-06T08:51:05.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9379 State: PUBLISHED Published: 2019-08-28T12:08:08 Last Updated: 2024-08-06T08:51:05.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg(). Additional Analyst Notes: - CVE Program Container: References: - https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html - https://ithemes.com/coordinated-wordpress-plugin-security-update/
CVE ID: CVE-2015-9380 State: PUBLISHED Published: 2019-08-30T12:26:50 Last Updated: 2024-08-06T08:51:05.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The photo-gallery plugin before 1.2.42 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/photo-gallery/#developers - https://wpvulndb.com/vulnerabilities/7225 - https://wordpress.org/support/topic/this-plugin-is-reported-as-vulnerable/
CVE ID: CVE-2015-9381 State: PUBLISHED Published: 2019-09-03T04:52:02 Last Updated: 2024-08-06T08:51:04.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/type1/t1parse.c?id=7962a15d64c876870ca0ae435ea2467d9be268d9 - https://savannah.nongnu.org/bugs/?45955 - https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html - https://usn.ubuntu.com/4126-2/ - https://access.redhat.com/errata/RHSA-2019:4254
CVE ID: CVE-2015-9382 State: PUBLISHED Published: 2019-09-03T04:52:17 Last Updated: 2024-08-06T08:51:04.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/src/psaux/psobjs.c?id=db5a4a9ae7b0048f033361744421da8569642f73 - https://savannah.nongnu.org/bugs/?45922 - https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html - https://usn.ubuntu.com/4126-2/ - https://access.redhat.com/errata/R
bian.org/debian-lts-announce/2019/09/msg00002.html - https://usn.ubuntu.com/4126-2/ - https://access.redhat.com/errata/RHSA-2019:4254
CVE ID: CVE-2015-9383 State: PUBLISHED Published: 2019-09-03T04:52:27 Last Updated: 2024-08-06T08:51:03.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. Additional Analyst Notes: - CVE Program Container: References: - http://git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=57cbb8c148999ba8f14ed53435fc071ac9953afd - https://savannah.nongnu.org/bugs/?46346 - https://lists.debian.org/debian-lts-announce/2019/09/msg00002.html - https://usn.ubuntu.com/4126-2/ - https://usn.ubuntu.com/4126-1/
CVE ID: CVE-2015-9384 State: PUBLISHED Published: 2019-09-20T14:50:47 Last Updated: 2024-08-06T08:51:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The relevant plugin before 1.0.8 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8361 - https://wordpress.org/plugins/relevant/#developers
CVE ID: CVE-2015-9385 State: PUBLISHED Published: 2019-09-20T14:52:09 Last Updated: 2024-08-06T08:51:04.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quotes-and-tips plugin before 1.20 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8359 - https://wordpress.org/plugins/quotes-and-tips/#developers
CVE ID: CVE-2015-9386 State: PUBLISHED Published: 2019-09-20T14:54:53 Last Updated: 2024-08-06T08:51:05.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/mtouch-quiz/#developers - https://www.davidsopas.com/multiple-vulns-on-mtouch-quiz-wordpress-plugin/
CVE ID: CVE-2015-9387 State: PUBLISHED Published: 2019-09-20T14:54:12 Last Updated: 2024-08-06T08:51:03.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/mtouch-quiz/#developers - https://www.davidsopas.com/multiple-vulns-on-mtouch-quiz-wordpress-plugin/
CVE ID: CVE-2015-9388 State: PUBLISHED Published: 2019-09-20T14:56:10 Last Updated: 2024-08-06T08:51:05.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/mtouch-quiz/#developers - https://www.davidsopas.com/multiple-vulns-on-mtouch-quiz-wordpress-plugin/
CVE ID: CVE-2015-9389 State: PUBLISHED Published: 2019-09-20T14:57:08 Last Updated: 2024-08-06T08:51:05.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/mtouch-quiz/#developers - https://www.davidsopas.com/multiple-vulns-on-mtouch-quiz-wordpress-plugin/
CVE ID: CVE-2015-9390 State: PUBLISHED Published: 2019-09-20T14:58:22 Last Updated: 2024-08-06T08:51:03.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/admin-management-xtended/#developers - https://security.szurek.pl/admin-management-xtended-240-privilege-escalation.html
CVE ID: CVE-2015-9391 State: PUBLISHED Published: 2019-09-20T14:59:52 Last Updated: 2024-08-06T08:51:05.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8351 - https://wordpress.org/plugins/yawpp/#developers
CVE ID: CVE-2015-9392 State: PUBLISHED Published: 2019-09-20T15:01:15 Last Updated: 2024-08-06T08:51:04.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8350 - https://wordpress.org/plugins/users-ultra/#developers - https://seclists.org/bugtraq/2015/Dec/13
CVE ID: CVE-2015-9393 State: PUBLISHED Published: 2019-09-20T15:02:48 Last Updated: 2024-08-06T08:51:04.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8350 - https://wordpress.org/plugins/users-ultra/#developers
CVE ID: CVE-2015-9394 State: PUBLISHED Published: 2019-09-20T15:03:46 Last Updated: 2024-08-06T08:51:04.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8350 - https://wordpress.org/plugins/users-ultra/#developers
CVE ID: CVE-2015-9395 State: PUBLISHED Published: 2019-09-20T15:04:47 Last Updated: 2024-08-06T08:51:04.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/users-ultra/#developers - https://wpvulndb.com/vulnerabilities/8349/ - https://seclists.org/bugtraq/2015/Dec/12
CVE ID: CVE-2015-9396 State: PUBLISHED Published: 2019-09-20T15:06:03 Last Updated: 2024-08-06T08:51:04.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8344 - https://wordpress.org/plugins/auto-thickbox-plus/#developers
CVE ID: CVE-2015-9397 State: PUBLISHED Published: 2019-09-20T15:07:11 Last Updated: 2024-08-06T08:51:04.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8322 - https://wordpress.org/plugins/gocodes/#developers - http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html
CVE ID: CVE-2015-9398 State: PUBLISHED Published: 2019-09-20T15:08:00 Last Updated: 2024-08-06T08:51:05.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8322 - https://wordpress.org/plugins/gocodes/#developers - http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html
CVE ID: CVE-2015-9399 State: PUBLISHED Published: 2019-09-20T15:09:10 Last Updated: 2024-08-06T08:51:04.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8316 - https://wordpress.org/plugins/wp-stats-dashboard/#developers - http://cinu.pl/research/wp-plugins/mail_468b117b2dc86cb3d2ae4b8c81884a99.html
CVE ID: CVE-2015-9400 State: PUBLISHED Published: 2019-09-20T15:10:26 Last Updated: 2024-08-06T08:51:05.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8304 - https://wordpress.org/plugins/wordpress-meta-robots/#developers - http://cinu.pl/research/wp-plugins/mail_b31beb377f24e401c9ec44a0f331a174.html
CVE ID: CVE-2015-9401 State: PUBLISHED Published: 2019-09-20T15:11:36 Last Updated: 2024-08-06T08:51:04.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8293 - https://wordpress.org/plugins/websimon-tables/#developers - http://cinu.pl/research/wp-plugins/mail_ae9e4b6fefceaebd216ddcf003f88bdd.html
CVE ID: CVE-2015-9402 State: PUBLISHED Published: 2019-09-20T15:12:46 Last Updated: 2024-08-06T08:51:05.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8243 - https://wordpress.org/plugins/users-ultra/#developers - https://seclists.org/bugtraq/2015/Nov/93
CVE ID: CVE-2015-9403 State: PUBLISHED Published: 2019-09-20T15:13:48 Last Updated: 2024-08-06T08:51:05.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/neuvoo-jobroll/#developers - https://packetstormsecurity.com/files/134240/
CVE ID: CVE-2015-9404 State: PUBLISHED Published: 2019-09-20T15:15:27 Last Updated: 2024-08-06T08:51:05.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/neuvoo-jobroll/#developers - https://packetstormsecurity.com/files/134240/
CVE ID: CVE-2015-9405 State: PUBLISHED Published: 2019-09-20T15:16:22 Last Updated: 2024-08-06T08:51:04.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-piwik plugin before 1.0.5 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8216 - https://wordpress.org/plugins/wp-piwik/#developers - https://github.com/braekling/WP-Matomo/commit/5110bfdb437a9f19b185ba8af33776fcb5e19940
CVE ID: CVE-2015-9406 State: PUBLISHED Published: 2019-09-20T19:26:27 Last Updated: 2024-08-06T08:51:05.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/133778/ - https://wpvulndb.com/vulnerabilities/9890
CVE ID: CVE-2015-9407 State: PUBLISHED Published: 2019-09-20T15:18:50 Last Updated: 2024-08-06T08:51:04.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8194 - https://wordpress.org/plugins/xpinner-lite/#developers - https://packetstormsecurity.com/files/133593/
CVE ID: CVE-2015-9408 State: PUBLISHED Published: 2019-09-20T15:19:27 Last Updated: 2024-08-06T08:51:04.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8194 - https://wordpress.org/plugins/xpinner-lite/#developers - https://packetstormsecurity.com/files/133593/
CVE ID: CVE-2015-9409 State: PUBLISHED Published: 2019-09-25T16:59:03 Last Updated: 2024-08-06T08:51:05.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8190 - https://wordpress.org/plugins/alo-easymail/#developers - https://packetstormsecurity.com/files/133594/
CVE ID: CVE-2015-9410 State: PUBLISHED Published: 2019-09-25T23:04:20 Last Updated: 2024-08-06T08:51:04.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/powerpress/#developers - https://github.com/cybersecurityworks/Disclosed/issues/7 - https://cybersecurityworks.com/zerodays/cve-2015-9410-blubrry.html