stasvinokur/cve-and-cwe-dataset-1999-2025 huggingface dataset:
CVE-2015-9250 (severity: HIGH, weakness: CWE-22)
An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter.
CVE-2015-9251 (severity: MEDIUM, weakness: CWE-79)
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CVE-2015-9252 (severity: MEDIUM, weakness: CWE-399)
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.
CVE-2015-9253 (severity: MEDIUM, weakness: CWE-400)
An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility.
CVE-2015-9254 (severity: CRITICAL, weakness: CWE-798)
Datto ALTO and SIRIS devices have a default VNC password.
CVE-2015-9255 (severity: MEDIUM, weakness: CWE-200)
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
CVE-2015-9256 (severity: MEDIUM, weakness: CWE-200)
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
CVE-2015-9257 (severity: MEDIUM, weakness: CWE-79)
BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.
CVE-2015-9258 (severity: HIGH, weakness: CWE-310)
In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature algorithm, they might (for example) be able to forge a signature by forcing a misinterpretation of an RSA-PSS key as Ed25519 elliptic-curve data.
CVE-2015-9259 (severity: CRITICAL, weakness: CWE-434)
In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file.
CVE-2015-9260 (severity: MEDIUM, weakness: CWE-79)
An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjects URI, as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI.
CVE-2015-9261 (severity: MEDIUM, weakness: CWE-476)
huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
CVE-2015-9262 (severity: CRITICAL, weakness: CWE-119)
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
CVE-2015-9263 (severity: CRITICAL, weakness: CWE-434)
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
CVE-2015-9264 (severity: CRITICAL, weakness: CWE-20)
Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service.
CVE-2015-9266 (severity: CRITICAL, weakness: CWE-22)
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.
CVE-2015-9267 (severity: MEDIUM, weakness: CWE-269)
Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.
CVE-2015-9268 (severity: HIGH, weakness: CWE-20)
Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime.
CVE-2015-9269 (severity: HIGH, weakness: CWE-200)
The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.
CVE-2015-9270 (severity: MEDIUM, weakness: CWE-79)
XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.
CVE-2015-9271 (severity: CRITICAL, weakness: CWE-434)
The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905.
CVE-2015-9272 (severity: CRITICAL, weakness: CWE-94)
The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code.
CVE-2015-9273 (severity: MEDIUM, weakness: CWE-79)
The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.
CVE-2015-9274 (severity: MEDIUM, weakness: CWE-125)
HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh.
CVE-2015-9275 (severity: MEDIUM, weakness: CWE-22)
ARC 5.21q allows directory traversal via a full pathname in an archive file.
CVE-2015-9276 (severity: MEDIUM, weakness: CWE-79)
SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker's email, which contained a malicious payload. Therefore, users' passwords could be reset by using an XSS attack, as the password reset page did not need the current password.
CVE-2015-9277 (severity: CRITICAL, weakness: CWE-22)
MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled.
CVE-2015-9278 (severity: CRITICAL, weakness: CWE-255)
MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request.
CVE-2015-9279 (severity: MEDIUM, weakness: CWE-79)
MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message.
CVE-2015-9280 (severity: CRITICAL, weakness: CWE-611)
MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
CVE-2015-9281 (severity: MEDIUM, weakness: CWE-79)
Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.
CVE-2015-9282 (severity: MEDIUM, weakness: CWE-79)
The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard.
CVE-2015-9284 (severity: HIGH, weakness: CWE-352)
The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.
CVE-2015-9285 (severity: MEDIUM, weakness: CWE-79)
esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.
CVE-2015-9286 (severity: MEDIUM, weakness: CWE-79)
Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.
CVE-2015-9287 (severity: CRITICAL, weakness: CWE-22)
Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response message ("WLS-Response") can be manipulated by an attacker. The "kid" field is not signed like the rest of the message, and manipulation is therefore trivial. The "kid" field should only ever represent an integer. However, it is possible to provide any string value. An attacker could use this to their advantage to force the application agent to load the RSA public key required for message integrity checking from an unintended location.
CVE-2015-9288 (severity: MEDIUM, weakness: CWE-200)
The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials
CVE-2015-9289 (severity: MEDIUM, weakness: CWE-125)
In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
CVE-2015-9290 (severity: CRITICAL, weakness: CWE-125)
In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.
CVE-2015-9291 (severity: HIGH, weakness: CWE-284)
cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).
CVE-2015-9292 (severity: HIGH, weakness: CWE-352)
6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
CVE-2015-9293 (severity: MEDIUM, weakness: CWE-79)
The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
CVE-2015-9294 (severity: MEDIUM, weakness: CWE-79)
The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
CVE-2015-9295 (severity: MEDIUM, weakness: CWE-79)
The contact-form-plugin plugin before 3.96 for WordPress has XSS.
CVE-2015-9296 (severity: MEDIUM, weakness: CWE-79)
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
CVE-2015-9297 (severity: MEDIUM, weakness: CWE-79)
The events-manager plugin before 5.6 for WordPress has XSS.
CVE-2015-9298 (severity: CRITICAL, weakness: CWE-94)
The events-manager plugin before 5.6 for WordPress has code injection.
CVE-2015-9299 (severity: MEDIUM, weakness: CWE-79)
The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
CVE-2015-9300 (severity: MEDIUM, weakness: CWE-79)
The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
CVE-2015-9301 (severity: CRITICAL, weakness: CWE-89)
The liveforms plugin before 3.2.0 for WordPress has SQL injection.
CVE-2015-9302 (severity: MEDIUM, weakness: CWE-79)
The simple-fields plugin before 1.4.11 for WordPress has XSS.
CVE-2015-9303 (severity: MEDIUM, weakness: CWE-79)
The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
CVE-2015-9304 (severity: MEDIUM, weakness: CWE-79)
The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.
CVE-2015-9305 (severity: MEDIUM, weakness: CWE-79)
The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.
CVE-2015-9306 (severity: MEDIUM, weakness: CWE-79)
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
CVE-2015-9307 (severity: HIGH, weakness: CWE-352)
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
CVE-2015-9308 (severity: HIGH, weakness: CWE-352)
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
CVE-2015-9309 (severity: HIGH, weakness: CWE-352)
The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
CVE-2015-9310 (severity: CRITICAL, weakness: CWE-89)
The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
CVE-2015-9311 (severity: MEDIUM, weakness: CWE-79)
The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
CVE-2015-9312 (severity: MEDIUM, weakness: CWE-79)
The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
CVE-2015-9313 (severity: CRITICAL, weakness: CWE-89)
The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
CVE-2015-9314 (severity: MEDIUM, weakness: CWE-79)
The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
CVE-2015-9315 (severity: CRITICAL, weakness: CWE-89)
The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
CVE-2015-9316 (severity: CRITICAL, weakness: CWE-89)
The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.
CVE-2015-9317 (severity: MEDIUM, weakness: CWE-79)
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
CVE-2015-9318 (severity: HIGH, weakness: CWE-254)
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.
CVE-2015-9319 (severity: MEDIUM, weakness: CWE-79)
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
CVE-2015-9320 (severity: MEDIUM, weakness: CWE-79)
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
CVE-2015-9321 (severity: MEDIUM, weakness: CWE-79)
The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.
CVE-2015-9322 (severity: HIGH, weakness: CWE-352)
The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.
CVE-2015-9323 (severity: CRITICAL, weakness: CWE-89)
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
CVE-2015-9324 (severity: CRITICAL, weakness: CWE-89)
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
CVE-2015-9325 (severity: CRITICAL, weakness: CWE-89)
The visitors-online plugin before 0.4 for WordPress has SQL injection.
CVE-2015-9326 (severity: CRITICAL, weakness: CWE-89)
The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.
CVE-2015-9327 (severity: MEDIUM, weakness: CWE-79)
The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.
CVE-2015-9328 (severity: MEDIUM, weakness: CWE-79)
The profile-builder plugin before 2.2.5 for WordPress has XSS.
CVE-2015-9329 (severity: MEDIUM, weakness: CWE-79)
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
CVE-2015-9330 (severity: CRITICAL, weakness: CWE-89)
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.
CVE-2015-9331 (severity: HIGH, weakness: CWE-254)
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
CVE-2015-9332 (severity: MEDIUM, weakness: CWE-352)
The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
CVE-2015-9333 (severity: CRITICAL, weakness: CWE-89)
The cforms2 plugin before 14.6.10 for WordPress has SQL injection.
CVE-2015-9334 (severity: CRITICAL, weakness: CWE-89)
The email-newsletter plugin through 20.15 for WordPress has SQL injection.
CVE-2015-9335 (severity: CRITICAL, weakness: CWE-89)
The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.
CVE-2015-9336 (severity: MEDIUM, weakness: CWE-79)
The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
CVE-2015-9337 (severity: HIGH, weakness: CWE-284)
The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
CVE-2015-9338 (severity: HIGH, weakness: CWE-434)
The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
CVE-2015-9339 (severity: HIGH, weakness: CWE-434)
The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
CVE-2015-9340 (severity: HIGH, weakness: CWE-434)
The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
CVE-2015-9341 (severity: HIGH, weakness: CWE-434)
The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
CVE-2015-9342 (severity: MEDIUM, weakness: CWE-79)
The wp-rollback plugin before 1.2.3 for WordPress has XSS.
CVE-2015-9343 (severity: HIGH, weakness: CWE-352)
The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
CVE-2015-9344 (severity: CRITICAL, weakness: CWE-89)
The link-log plugin before 2.1 for WordPress has SQL injection.
CVE-2015-9345 (severity: HIGH, weakness: CWE-20)
The link-log plugin before 2.0 for WordPress has HTTP Response Splitting.
CVE-2015-9346 (severity: MEDIUM, weakness: CWE-79)
The cp-polls plugin before 1.0.5 for WordPress has XSS.
CVE-2015-9347 (severity: MEDIUM, weakness: CWE-79)
The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
CVE-2015-9348 (severity: HIGH, weakness: CWE-20)
The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
CVE-2015-9349 (severity: MEDIUM, weakness: CWE-79)
The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
CVE-2015-9350 (severity: MEDIUM, weakness: CWE-79)
The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.
CVE-2015-9351 (severity: CRITICAL, weakness: CWE-20)
The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.
CVE-2015-9352 (severity: CRITICAL, weakness: CWE-89)
The wp-polls plugin before 2.72 for WordPress has SQL injection.
CVE-2015-9353 (severity: HIGH, weakness: CWE-89)
The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.
CVE-2015-9354 (severity: MEDIUM, weakness: CWE-79)
The gigpress plugin before 2.3.11 for WordPress has XSS.
CVE-2015-9355 (severity: MEDIUM, weakness: CWE-79)
The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.
CVE-2015-9356 (severity: MEDIUM, weakness: CWE-79)
The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.
CVE-2015-9357 (severity: MEDIUM, weakness: CWE-79)
The akismet plugin before 3.1.5 for WordPress has XSS.
CVE-2015-9358 (severity: MEDIUM, weakness: CWE-79)
The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9359 (severity: MEDIUM, weakness: CWE-79)
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9360 (severity: MEDIUM, weakness: CWE-79)
The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9361 (severity: MEDIUM, weakness: CWE-79)
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9362 (severity: MEDIUM, weakness: CWE-79)
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9363 (severity: MEDIUM, weakness: CWE-79)
iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9364 (severity: MEDIUM, weakness: CWE-79)
2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9365 (severity: MEDIUM, weakness: CWE-79)
Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9366 (severity: MEDIUM, weakness: CWE-79)
Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9367 (severity: MEDIUM, weakness: CWE-79)
Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9368 (severity: MEDIUM, weakness: CWE-79)
Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9369 (severity: MEDIUM, weakness: CWE-79)
Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9370 (severity: MEDIUM, weakness: CWE-79)
Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9371 (severity: MEDIUM, weakness: CWE-79)
Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9372 (severity: MEDIUM, weakness: CWE-79)
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9373 (severity: MEDIUM, weakness: CWE-79)
PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9374 (severity: MEDIUM, weakness: CWE-79)
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9375 (severity: MEDIUM, weakness: CWE-79)
Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9376 (severity: MEDIUM, weakness: CWE-79)
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9377 (severity: MEDIUM, weakness: CWE-79)
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9378 (severity: MEDIUM, weakness: CWE-79)
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9379 (severity: MEDIUM, weakness: CWE-79)
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9380 (severity: HIGH, weakness: CWE-352)
The photo-gallery plugin before 1.2.42 for WordPress has CSRF.
CVE-2015-9381 (severity: HIGH, weakness: CWE-125)
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.