rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-9326 
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-16T13:40:28.000Z
CVE-2015-9327 
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:48:26.000Z
CVE-2015-9328 
The profile-builder plugin before 2.2.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-21T17:45:20.000Z
CVE-2015-9329 
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:59:55.000Z
CVE-2015-9330 
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:59:05.000Z
CVE-2015-9331 
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:58:18.000Z
CVE-2015-9332 
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-20T14:51:01.000Z
CVE-2015-9333 
The cforms2 plugin before 14.6.10 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:13:53.000Z
CVE-2015-9334 
The email-newsletter plugin through 20.15 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:45:31.000Z
CVE-2015-9335 
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:17:21.000Z
CVE-2015-9336 
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T12:20:43.000Z
CVE-2015-9337 
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T13:40:52.000Z
CVE-2015-9338 
The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:03:55.000Z
CVE-2015-9339 
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:02:27.000Z
CVE-2015-9340 
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:01:24.000Z
CVE-2015-9341 
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-22T19:00:32.000Z
CVE-2015-9342 
The wp-rollback plugin before 1.2.3 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:20:49.000Z
CVE-2015-9343 
The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:21:39.000Z
CVE-2015-9344 
The link-log plugin before 2.1 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:27:26.000Z
CVE-2015-9345 
The link-log plugin before 2.0 for WordPress has HTTP Response Splitting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:34:26.000Z
CVE-2015-9346 
The cp-polls plugin before 1.0.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:49:53.000Z
CVE-2015-9347 
The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T11:51:59.000Z
CVE-2015-9348 
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:21:56.000Z
CVE-2015-9349 
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:00:11.000Z
CVE-2015-9350 
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:02:17.000Z
CVE-2015-9351 
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:01:31.000Z
CVE-2015-9352 
The wp-polls plugin before 2.72 for WordPress has SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-27T12:05:41.000Z
CVE-2015-9353 
The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:07:41.000Z
CVE-2015-9354 
The gigpress plugin before 2.3.11 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:08:29.000Z
CVE-2015-9355 
The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:16:29.000Z
CVE-2015-9356 
The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:20:03.000Z
CVE-2015-9357 
The akismet plugin before 3.1.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:42:02.000Z
CVE-2015-9358 
The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:43:51.000Z
CVE-2015-9359 
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T14:23:20.000Z
CVE-2015-9360 
The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:50:44.000Z
CVE-2015-9361 
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:53:40.000Z
CVE-2015-9362 
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:54:30.000Z
CVE-2015-9363 
iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:56:55.000Z
CVE-2015-9364 
2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:57:46.000Z
CVE-2015-9365 
Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:58:26.000Z
CVE-2015-9366 
Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T11:59:26.000Z
CVE-2015-9367 
Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:00:08.000Z
CVE-2015-9368 
Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:00:50.000Z
CVE-2015-9369 
Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:01:31.000Z
CVE-2015-9370 
Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:02:14.000Z
CVE-2015-9371 
Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:02:51.000Z
CVE-2015-9372 
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:03:30.000Z
CVE-2015-9373 
PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:04:06.000Z
CVE-2015-9374 
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:04:48.000Z
CVE-2015-9375 
Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:05:26.000Z
CVE-2015-9376 
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:06:12.000Z
CVE-2015-9377 
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:06:56.000Z
CVE-2015-9378 
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:07:30.000Z
CVE-2015-9379 
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-28T12:08:08.000Z
CVE-2015-9380 
The photo-gallery plugin before 1.2.42 for WordPress has CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-08-30T12:26:50.000Z
CVE-2015-9381 
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T04:52:02.000Z
CVE-2015-9382 
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T04:52:17.000Z
CVE-2015-9383 
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-03T04:52:27.000Z
CVE-2015-9384 
The relevant plugin before 1.0.8 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:50:47.000Z
CVE-2015-9385 
The quotes-and-tips plugin before 1.20 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:52:09.000Z
CVE-2015-9386 
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:54:53.000Z
CVE-2015-9387 
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:54:12.000Z
CVE-2015-9388 
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:56:10.000Z
CVE-2015-9389 
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:57:08.000Z
CVE-2015-9390 
The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:58:22.000Z
CVE-2015-9391 
The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T14:59:52.000Z
CVE-2015-9392 
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:01:15.000Z
CVE-2015-9393 
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:02:48.000Z
CVE-2015-9394 
The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:03:46.000Z
CVE-2015-9395 
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:04:47.000Z
CVE-2015-9396 
The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:06:03.000Z
CVE-2015-9397 
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:07:11.000Z
CVE-2015-9398 
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:08:00.000Z
CVE-2015-9399 
The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:09:10.000Z
CVE-2015-9400 
The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:10:26.000Z
CVE-2015-9401 
The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:11:36.000Z
CVE-2015-9402 
The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:12:46.000Z
CVE-2015-9403 
The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:13:48.000Z
CVE-2015-9404 
The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:15:27.000Z
CVE-2015-9405 
The wp-piwik plugin before 1.0.5 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:16:22.000Z
CVE-2015-9406 
Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T19:26:27.000Z
CVE-2015-9407 
The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:18:50.000Z
CVE-2015-9408 
The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-20T15:19:27.000Z
CVE-2015-9409 
The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T16:59:03.000Z
CVE-2015-9410 
The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:04:20.000Z
CVE-2015-9411 
The Postmatic plugin before 1.4.6 for WordPress has XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:06:11.000Z
CVE-2015-9412 
The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:07:34.000Z
CVE-2015-9413 
The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:25:42.000Z
CVE-2015-9414 
The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:27:56.000Z
CVE-2015-9415 
The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:31:00.000Z
CVE-2015-9416 
The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:36:56.000Z
CVE-2015-9417 
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:44:40.000Z
CVE-2015-9418 
The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-25T23:48:21.000Z
CVE-2015-9419 
The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:03:04.000Z
CVE-2015-9420 
The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:06:56.000Z
CVE-2015-9421 
The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:08:30.000Z
CVE-2015-9422 
The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:19:06.000Z
CVE-2015-9423 
The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount, or plugneditcontent parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:24:33.000Z
CVE-2015-9424 
The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:35:35.000Z
CVE-2015-9425 
The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:43:23.000Z
CVE-2015-9426 
The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:44:36.000Z
CVE-2015-9427 
The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:47:23.000Z
CVE-2015-9428 
The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:50:11.000Z
CVE-2015-9429 
The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-09-26T00:52:57.000Z