Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9411 State: PUBLISHED Published: 2019-09-25T23:06:11 Last Updated: 2024-08-06T08:51:05.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Postmatic plugin before 1.4.6 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8183 - https://wordpress.org/plugins/postmatic/#developers
CVE ID: CVE-2015-9412 State: PUBLISHED Published: 2019-09-25T23:07:34 Last Updated: 2024-08-06T08:51:04.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8182 - https://wordpress.org/plugins/royal-slider/#developers
CVE ID: CVE-2015-9413 State: PUBLISHED Published: 2019-09-25T23:25:42 Last Updated: 2024-08-06T08:51:04.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8180 - https://wordpress.org/plugins/eshop/#developers - https://packetstormsecurity.com/files/133480/
CVE ID: CVE-2015-9414 State: PUBLISHED Published: 2019-09-25T23:27:56 Last Updated: 2024-08-06T08:51:05.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8175 - https://wordpress.org/plugins/wp-symposium/#developers
CVE ID: CVE-2015-9415 State: PUBLISHED Published: 2019-09-25T23:31:00 Last Updated: 2024-08-06T08:51:04.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8174 - https://wordpress.org/plugins/bj-lazy-load/#developers
CVE ID: CVE-2015-9416 State: PUBLISHED Published: 2019-09-25T23:36:56 Last Updated: 2024-08-06T08:51:04.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8173 - https://wordpress.org/plugins/sitepress-multilingual-cms/#developers
CVE ID: CVE-2015-9417 State: PUBLISHED Published: 2019-09-25T23:44:40 Last Updated: 2024-08-06T08:51:04.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8170 - https://wordpress.org/plugins/testimonial-slider/#developers
CVE ID: CVE-2015-9418 State: PUBLISHED Published: 2019-09-25T23:48:21 Last Updated: 2024-08-06T08:51:04.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/watupro/#developers - https://advisories.dxw.com/advisories/csrf-in-watu-pro-allows-unauthenticated-attackers-to-delete-quizzes/
CVE ID: CVE-2015-9419 State: PUBLISHED Published: 2019-09-26T00:03:04 Last Updated: 2024-08-06T08:51:04.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/captain-slider/#developers - https://packetstormsecurity.com/files/133362/
CVE ID: CVE-2015-9420 State: PUBLISHED Published: 2019-09-26T00:06:56 Last Updated: 2024-08-06T08:51:05.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8306 - https://wordpress.org/plugins/soundcloud-is-gold/#developers - http://cinu.pl/research/wp-plugins/mail_9acbc3ef2dd43bfb78b6b3dcf6c5ef01.html
CVE ID: CVE-2015-9421 State: PUBLISHED Published: 2019-09-26T00:08:30 Last Updated: 2024-08-06T08:51:05.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8338 - https://wordpress.org/plugins/olevmedia-shortcodes/#developers - http://cinu.pl/research/wp-plugins/mail_d9e466122cd9a6ca27db840cca277cdb.html
CVE ID: CVE-2015-9422 State: PUBLISHED Published: 2019-09-26T00:19:06 Last Updated: 2024-08-06T08:51:04.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8331 - https://wordpress.org/plugins/plugnedit/#developers - http://cinu.pl/research/wp-plugins/mail_b5405e735cb605b2fd1a300bb8be4860.html
CVE ID: CVE-2015-9423 State: PUBLISHED Published: 2019-09-26T00:24:33 Last Updated: 2024-08-06T08:51:05.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount, or plugneditcontent parameters. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8331 - https://wordpress.org/plugins/plugnedit/#developers - http://cinu.pl/research/wp-plugins/mail_b5405e735cb605b2fd1a300bb8be4860.html
CVE ID: CVE-2015-9424 State: PUBLISHED Published: 2019-09-26T00:35:35 Last Updated: 2024-08-06T08:51:05.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8330 - https://wordpress.org/plugins/multicons/#developers - http://cinu.pl/research/wp-plugins/mail_aea47a98ad3088dbb33528ded8e1b124.html
CVE ID: CVE-2015-9425 State: PUBLISHED Published: 2019-09-26T00:43:23 Last Updated: 2024-08-06T08:51:05.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8327 - https://wordpress.org/plugins/social-locker/#developers - http://cinu.pl/research/wp-plugins/mail_9e26c6f71bf8467e4a5017b15d5acddc.html
CVE ID: CVE-2015-9426 State: PUBLISHED Published: 2019-09-26T00:44:36 Last Updated: 2024-08-06T08:51:05.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8297 - https://wordpress.org/plugins/manual-image-crop/#developers - http://cinu.pl/research/wp-plugins/mail_7c87194ce1dcf0642135d17a71ed91cd.html
CVE ID: CVE-2015-9427 State: PUBLISHED Published: 2019-09-26T00:47:23 Last Updated: 2024-08-06T08:51:05.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8158 - https://wordpress.org/plugins/googmonify/#developers - http://packetstormsecurity.com/files/133267/
CVE ID: CVE-2015-9428 State: PUBLISHED Published: 2019-09-26T00:50:11 Last Updated: 2024-08-06T08:51:05.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8291 - https://wordpress.org/plugins/wplegalpages/#developers - http://cinu.pl/research/wp-plugins/mail_4e7cf11876edb93517405b69cb033741.html
CVE ID: CVE-2015-9429 State: PUBLISHED Published: 2019-09-26T00:52:57 Last Updated: 2024-08-06T08:51:05.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8285 - https://wordpress.org/plugins/yith-maintenance-mode/#developers - http://cinu.pl/research/wp-plugins/mail_3a14a77571c73684103e0f517a92d757.html
CVE ID: CVE-2015-9430 State: PUBLISHED Published: 2019-09-26T00:53:56 Last Updated: 2024-08-06T08:51:05.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8281 - https://wordpress.org/plugins/crazy-bone/#developers - http://cinu.pl/research/wp-plugins/mail_e22c10161b1e2e4e54facf2d17e723c3.html
CVE ID: CVE-2015-9431 State: PUBLISHED Published: 2019-09-26T01:06:12 Last Updated: 2024-08-06T08:51:05.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8279 - https://wordpress.org/plugins/qtranslate-x/#developers - http://cinu.pl/research/wp-plugins/mail_1a40d7e7a2c29847b939f2c7472c335e.html
CVE ID: CVE-2015-9432 State: PUBLISHED Published: 2019-09-26T01:07:44 Last Updated: 2024-08-06T08:51:05.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8268 - https://wordpress.org/plugins/alpine-photo-tile-for-instagram/#developers - http://cinu.pl/research/wp-plugins/mail_8af3902b4f3a5d06304937c7eab1ee35.html
CVE ID: CVE-2015-9433 State: PUBLISHED Published: 2019-09-26T01:09:22 Last Updated: 2024-08-06T08:51:05.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8252 - https://wordpress.org/plugins/wp-social-bookmarking-light/#developers - http://cinu.pl/research/wp-plugins/mail_58e88633599b7b2fc0f44ce6fa7ff27d.html
CVE ID: CVE-2015-9434 State: PUBLISHED Published: 2019-09-26T01:12:31 Last Updated: 2024-08-06T08:51:05.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or tab_flags_order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8290 - https://wordpress.org/plugins/kiwi-logo-carousel/#developers - http://cinu.pl/research/wp-plugins/mail_3764bb40db5ed12aac2c7812d7544730.html
CVE ID: CVE-2015-9435 State: PUBLISHED Published: 2019-09-26T01:14:07 Last Updated: 2024-08-06T08:51:04.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/oauth2-provider/#developers - https://security.dxw.com/advisories/the-oauth2-complete-plugin-for-wordpress-uses-a-pseudorandom-number-generator-which-is-non-cryptographically-secure/
CVE ID: CVE-2015-9436 State: PUBLISHED Published: 2019-09-26T01:15:52 Last Updated: 2024-08-06T08:51:05.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8258 - https://wordpress.org/plugins/dynamic-widgets/#developers - http://cinu.pl/research/wp-plugins/mail_489304900a50751da1495e2ea660bc51.html
CVE ID: CVE-2015-9437 State: PUBLISHED Published: 2019-09-26T01:18:30 Last Updated: 2024-08-06T08:51:04.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8258 - https://wordpress.org/plugins/dynamic-widgets/#developers - http://cinu.pl/research/wp-plugins/mail_489304900a50751da1495e2ea660bc51.html
CVE ID: CVE-2015-9438 State: PUBLISHED Published: 2019-09-26T01:22:16 Last Updated: 2024-08-06T08:51:05.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_base, widget_number, or instance parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8247 - https://wordpress.org/plugins/display-widgets/#developers - http://cinu.pl/research/wp-plugins/mail_a7012199c9236754edd72786637e5d2d.html
CVE ID: CVE-2015-9439 State: PUBLISHED Published: 2019-09-26T02:11:14 Last Updated: 2024-08-06T08:51:05.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthis_social_widget pubid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8246 - https://wordpress.org/plugins/addthis/#developers - http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html
CVE ID: CVE-2015-9440 State: PUBLISHED Published: 2019-09-26T03:31:23 Last Updated: 2024-08-06T08:51:05.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-new. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/monetize/#developers - http://packetstormsecurity.com/files/133002/
CVE ID: CVE-2015-9441 State: PUBLISHED Published: 2019-09-26T03:53:39 Last Updated: 2024-08-06T08:51:05.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/bookmarkify/#developers - http://packetstormsecurity.com/files/133001/
CVE ID: CVE-2015-9442 State: PUBLISHED Published: 2019-09-26T03:51:45 Last Updated: 2024-08-06T08:51:05.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/avenirsoft-directdownload/#developers - http://packetstormsecurity.com/files/132992/
CVE ID: CVE-2015-9443 State: PUBLISHED Published: 2019-09-26T03:51:00 Last Updated: 2024-08-06T08:51:04.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=Accu_Data_WP. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/accurate-form-data-real-time-form-validation/#developers - http://packetstormsecurity.com/files/132911/
CVE ID: CVE-2015-9444 State: PUBLISHED Published: 2019-09-26T03:48:42 Last Updated: 2024-08-06T08:51:05.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: The altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/ PATH_SELF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/altos-connect/#developers - http://packetstormsecurity.com/files/132908/
CVE ID: CVE-2015-9445 State: PUBLISHED Published: 2019-09-26T03:44:04 Last Updated: 2024-08-06T08:51:05.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8113 - https://wordpress.org/plugins/unite-gallery-lite/#developers - http://packetstormsecurity.com/files/132842/
CVE ID: CVE-2015-9446 State: PUBLISHED Published: 2019-09-26T03:40:48 Last Updated: 2024-08-06T08:51:05.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8113 - https://wordpress.org/plugins/unite-gallery-lite/#developers - http://packetstormsecurity.com/files/132842/
CVE ID: CVE-2015-9447 State: PUBLISHED Published: 2019-09-26T03:39:11 Last Updated: 2024-08-06T08:51:05.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8113 - https://wordpress.org/plugins/unite-gallery-lite/#developers - http://packetstormsecurity.com/files/132842/
CVE ID: CVE-2015-9448 State: PUBLISHED Published: 2019-09-26T03:33:49 Last Updated: 2024-08-06T08:51:05.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8324 - https://wordpress.org/plugins/sendpress/#developers - http://cinu.pl/research/wp-plugins/mail_8a2f7613577ea8e613ec274aeec14527.html
CVE ID: CVE-2015-9449 State: PUBLISHED Published: 2019-09-26T00:55:16 Last Updated: 2024-08-06T08:51:05.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8321 - https://wordpress.org/plugins/microblog-poster/#developers - http://cinu.pl/research/wp-plugins/mail_642d8f7d8715d08f070a35b896f2d8bd.html
CVE ID: CVE-2015-9450 State: PUBLISHED Published: 2019-10-07T14:14:35 Last Updated: 2024-08-06T08:51:04.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8340 - https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers - http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html
CVE ID: CVE-2015-9451 State: PUBLISHED Published: 2019-10-07T14:17:49 Last Updated: 2024-08-06T08:51:04.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8340 - https://wordpress.org/plugins/plugmatter-optin-feature-box-lite/#developers - http://cinu.pl/research/wp-plugins/mail_ec951d52aa603c9caaca8c7005b84004.html
CVE ID: CVE-2015-9452 State: PUBLISHED Published: 2019-10-07T14:19:48 Last Updated: 2024-08-06T08:51:05.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8336 - https://wordpress.org/plugins/nex-forms-express-wp-form-builder/#developers - http://cinu.pl/research/wp-plugins/mail_cb24b6204803e8e94943b198edc37af7.html
CVE ID: CVE-2015-9453 State: PUBLISHED Published: 2019-10-07T14:21:26 Last Updated: 2024-08-06T08:51:05.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8333 - https://wordpress.org/plugins/broken-link-manager/#developers - http://cinu.pl/research/wp-plugins/mail_b677bb83a6c1495f85f76faa5b13011d.html
CVE ID: CVE-2015-9454 State: PUBLISHED Published: 2019-10-07T14:22:47 Last Updated: 2024-08-06T08:51:05.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8284 - https://wordpress.org/plugins/smooth-slider/#developers - http://cinu.pl/research/wp-plugins/mail_36e814da6ac4dd903be2c77cfbdd0afd.html
CVE ID: CVE-2015-9455 State: PUBLISHED Published: 2019-10-07T14:25:06 Last Updated: 2024-08-06T08:51:05.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action. Additional Analyst Notes: - CVE Program Container: References: - https://security.dxw.com/advisories/csrf-and-arbitrary-file-deletion-in-buddypress-activity-plus-1-5/ - https://wordpress.org/plugins/buddypress-activity-plus/#developers