Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-9456 State: PUBLISHED Published: 2019-10-07T14:27:05 Last Updated: 2024-08-06T08:51:05.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8315 - https://wordpress.org/plugins/orbisius-child-theme-creator/#developers - http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html - https
-child-theme-creator/#developers - http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html - https://wpvulndb.com/vulnerabilities/8315
CVE ID: CVE-2015-9457 State: PUBLISHED Published: 2019-10-10T15:48:17 Last Updated: 2024-08-06T08:51:05.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8249 - https://wordpress.org/plugins/pretty-link/#developers - http://cinu.pl/research/wp-plugins/mail_9ca443a3759e5c7fd889ae0e02e044e6.html
CVE ID: CVE-2015-9458 State: PUBLISHED Published: 2019-10-10T15:49:34 Last Updated: 2024-08-06T08:51:04.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/searchterms-tagging-2/#developers - http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html
CVE ID: CVE-2015-9459 State: PUBLISHED Published: 2019-10-10T15:50:33 Last Updated: 2024-08-06T08:51:04.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/searchterms-tagging-2/#developers - http://cinu.pl/research/wp-plugins/mail_d14e213879cd60e80e538bde21c0359b.html
CVE ID: CVE-2015-9460 State: PUBLISHED Published: 2019-10-10T15:52:24 Last Updated: 2024-08-06T08:51:05.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8339 - https://wordpress.org/plugins/booking-system/#developers - http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html
CVE ID: CVE-2015-9461 State: PUBLISHED Published: 2019-10-10T15:54:01 Last Updated: 2024-08-06T08:51:05.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8311 - https://wordpress.org/plugins/awesome-filterable-portfolio/#developers - http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html
CVE ID: CVE-2015-9462 State: PUBLISHED Published: 2019-10-10T15:55:43 Last Updated: 2024-08-06T08:51:05.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8311 - https://wordpress.org/plugins/awesome-filterable-portfolio/#developers - http://cinu.pl/research/wp-plugins/mail_082287dbf7a24d415ff71581fc248330.html
CVE ID: CVE-2015-9463 State: PUBLISHED Published: 2019-10-10T16:08:44 Last Updated: 2024-08-06T08:51:05.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/s3bubble-amazon-s3-audio-streaming/#developers - http://packetstormsecurity.com/files/132578/
CVE ID: CVE-2015-9464 State: PUBLISHED Published: 2019-10-10T16:00:41 Last Updated: 2024-08-06T08:51:05.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/s3bubble-amazon-s3-html-5-video-with-adverts/#developers - https://www.exploit-db.com/exploits/37494
CVE ID: CVE-2015-9465 State: PUBLISHED Published: 2019-10-10T16:01:50 Last Updated: 2024-08-06T08:51:05.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8309 - https://wordpress.org/plugins/yet-another-stars-rating/#developers - http://cinu.pl/research/wp-plugins/mail_041b796c7533880df03a43895fed5f00.html
CVE ID: CVE-2015-9466 State: PUBLISHED Published: 2019-10-10T16:03:18 Last Updated: 2024-08-06T08:51:05.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8318 - https://wordpress.org/plugins/wti-like-post/#developers - http://cinu.pl/research/wp-plugins/mail_576345187f5867ec8921b12de5884fb1.html
CVE ID: CVE-2015-9467 State: PUBLISHED Published: 2019-10-10T16:04:19 Last Updated: 2024-08-06T08:51:05.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8320 - https://wordpress.org/plugins/broken-link-manager/#developers - http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html
CVE ID: CVE-2015-9468 State: PUBLISHED Published: 2019-10-10T16:05:36 Last Updated: 2024-08-06T08:51:05.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/broken-link-manager/#developers - http://cinu.pl/research/wp-plugins/mail_604dd4c86dca013f6e5e89751352f36d.html
CVE ID: CVE-2015-9469 State: PUBLISHED Published: 2019-10-10T16:06:54 Last Updated: 2024-08-06T08:51:05.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/content-grabber/#developers - https://packetstormsecurity.com/files/132910/
CVE ID: CVE-2015-9470 State: PUBLISHED Published: 2019-10-10T16:08:10 Last Updated: 2024-08-06T08:51:05.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/history-collection/#developers - https://packetstormsecurity.com/files/132279/
CVE ID: CVE-2015-9471 State: PUBLISHED Published: 2019-10-10T16:11:59 Last Updated: 2024-08-06T08:51:05.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8019 - https://wordpress.org/plugins/dzs-zoomsounds/#developers - https://packetstormsecurity.com/files/132124/
CVE ID: CVE-2015-9472 State: PUBLISHED Published: 2019-10-10T16:13:21 Last Updated: 2024-08-06T08:51:05.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8015 - https://wordpress.org/plugins/incoming-links/#developers - https://plugins.trac.wordpress.org/changeset/1080044/incoming-links
CVE ID: CVE-2015-9473 State: PUBLISHED Published: 2019-10-10T16:14:40 Last Updated: 2024-08-06T08:51:05.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132042/
CVE ID: CVE-2015-9474 State: PUBLISHED Published: 2019-10-10T16:15:39 Last Updated: 2024-08-06T08:51:05.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8061
CVE ID: CVE-2015-9475 State: PUBLISHED Published: 2019-10-10T16:16:10 Last Updated: 2024-08-06T08:51:05.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8061
CVE ID: CVE-2015-9476 State: PUBLISHED Published: 2019-10-10T16:16:52 Last Updated: 2024-08-06T08:51:05.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8061
CVE ID: CVE-2015-9477 State: PUBLISHED Published: 2019-10-10T16:17:25 Last Updated: 2024-08-06T08:51:05.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8061
CVE ID: CVE-2015-9478 State: PUBLISHED Published: 2019-10-10T16:19:15 Last Updated: 2024-08-06T08:51:05.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/scaron/prettyphoto/releases/tag/3.1.6 - https://github.com/scaron/prettyphoto/issues/149
CVE ID: CVE-2015-9479 State: PUBLISHED Published: 2019-10-10T16:20:53 Last Updated: 2024-08-06T08:51:05.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/132590/
CVE ID: CVE-2015-9480 State: PUBLISHED Published: 2019-10-10T16:22:28 Last Updated: 2024-08-06T08:51:05.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37252
CVE ID: CVE-2015-9481 State: PUBLISHED Published: 2019-10-11T17:57:59 Last Updated: 2024-08-06T08:51:05.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9482 State: PUBLISHED Published: 2019-10-11T17:58:34 Last Updated: 2024-08-06T08:51:05.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9483 State: PUBLISHED Published: 2019-10-11T17:59:14 Last Updated: 2024-08-06T08:51:05.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9484 State: PUBLISHED Published: 2019-10-11T18:00:10 Last Updated: 2024-08-06T08:51:05.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9485 State: PUBLISHED Published: 2019-10-11T18:00:44 Last Updated: 2024-08-06T08:51:05.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9486 State: PUBLISHED Published: 2019-10-11T18:01:30 Last Updated: 2024-08-06T08:51:05.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9487 State: PUBLISHED Published: 2019-10-11T18:02:30 Last Updated: 2024-08-06T08:51:05.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9488 State: PUBLISHED Published: 2019-10-11T18:03:03 Last Updated: 2024-08-06T08:51:05.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9489 State: PUBLISHED Published: 2019-10-11T18:03:37 Last Updated: 2024-08-06T08:51:05.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9490 State: PUBLISHED Published: 2019-10-11T18:04:09 Last Updated: 2024-08-06T08:51:05.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9491 State: PUBLISHED Published: 2019-10-11T18:04:46 Last Updated: 2024-08-06T08:51:05.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9492 State: PUBLISHED Published: 2019-10-11T18:05:14 Last Updated: 2024-08-06T08:51:05.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131957/
CVE ID: CVE-2015-9493 State: PUBLISHED Published: 2019-10-22T19:13:49 Last Updated: 2024-08-06T08:51:05.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7937 - https://wordpress.org/plugins/my-wish-list/#developers
CVE ID: CVE-2015-9494 State: PUBLISHED Published: 2019-10-22T19:19:48 Last Updated: 2024-08-06T08:51:05.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7982
CVE ID: CVE-2015-9495 State: PUBLISHED Published: 2019-10-22T19:24:56 Last Updated: 2024-08-06T08:51:05.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7981 - https://wordpress.org/plugins/syndication-links/#developers
CVE ID: CVE-2015-9496 State: PUBLISHED Published: 2019-10-22T20:27:04 Last Updated: 2024-08-06T08:51:05.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7972 - https://www.exploit-db.com/exploits/36942
CVE ID: CVE-2015-9497 State: PUBLISHED Published: 2019-10-22T20:34:15 Last Updated: 2024-08-06T08:51:05.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7974 - https://packetstormsecurity.com/files/131798/
CVE ID: CVE-2015-9498 State: PUBLISHED Published: 2019-10-22T20:36:32 Last Updated: 2024-08-06T08:51:05.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/8011 - https://wordpress.org/plugins/wps-hide-login/#developers
CVE ID: CVE-2015-9499 State: PUBLISHED Published: 2019-10-22T20:45:49 Last Updated: 2024-08-06T08:51:05.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7955 - https://github.com/espreto/wpsploit/blob/master/modules/exploits/unix/webapp/wp_showbiz_file_upload.rb - https://www.exploit-db.com/exploits/35385
CVE ID: CVE-2015-9500 State: PUBLISHED Published: 2019-10-22T20:52:08 Last Updated: 2024-08-06T08:51:05.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Exquisite Ultimate Newspaper theme 1.3.3 for WordPress has XSS via the anchor identifier to assets/js/jquery.foundation.plugins.js. Additional Analyst Notes: - CVE Program Container: References: - https://packetstormsecurity.com/files/131657/
CVE ID: CVE-2015-9501 State: PUBLISHED Published: 2019-10-22T21:01:17 Last Updated: 2024-08-06T08:51:05.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Artificial Intelligence theme before 1.2.4 for WordPress has XSS because Genericons HTML files are unnecessarily placed under the web root. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7994 - https://github.com/duchenerc/artificial-intelligence/commit/c70631b1f80518411df2f88476041351110c6eac
CVE ID: CVE-2015-9502 State: PUBLISHED Published: 2019-10-23T16:10:03 Last Updated: 2024-08-06T08:51:05.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Auberge theme before 1.4.5 for WordPress has XSS via the genericons/example.html anchor identifier. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7987
CVE ID: CVE-2015-9503 State: PUBLISHED Published: 2019-10-23T16:11:58 Last Updated: 2024-08-06T08:51:05.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Modern theme before 1.4.2 for WordPress has XSS via the genericons/example.html anchor identifier. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7986
CVE ID: CVE-2015-9504 State: PUBLISHED Published: 2019-10-23T16:13:16 Last Updated: 2024-08-06T08:51:05.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The weeklynews theme before 2.2.9 for WordPress has XSS via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - https://wpvulndb.com/vulnerabilities/7957