yahoo-inc/cve-impacts huggingface dataset:
CVE-2015-9222: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and Snapdragon_High_Med_2016, processing erroneous bitstreams may result in a HW freeze. FW should detect the HW freeze based on watchdog timer, but because the watchdog timer is not enabled, an infinite loop occurs, resulting in a device freeze.
Key phrases: erroneous bitstreams, infinite loop
CVE-2015-9223: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, SD 400, SD 600, and SD 800, a buffer overflow can occur when processing an audio buffer.
Key phrases: buffer overflow
CVE-2015-9224: In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 820A, SD 835, SD 845, SD 850, and SDX20, lack of input Validation in QURTK_write() can cause potential buffer overflow.
Key phrases: buffer overflow
CVE-2015-9226: Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_filename function in upload/admin2/model/products/model_admin_download.php or remote authenticated users with a valid Paypal transaction token to execute arbitrary SQL commands via the ref parameter in the (3) orderUpdate function in upload/catalog/extension/payment/paypal.php.
Key phrases: execute arbitrary SQL commands, execute arbitrary SQL commands via the download parameter, sql injection
CVE-2015-9227: PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators to execute arbitrary PHP code via a URL in the file_path parameter to upload/admin2.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code via a URL in, php remote file inclusion, arbitrary php code
CVE-2015-9228: In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
Key phrases: unrestricted file upload
CVE-2015-9229: In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images[1][alttext] parameter.
Key phrases: xss
CVE-2015-9230: In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPress, XSS is possible for remote authenticated administrators via the DBTablePrefix parameter.
Key phrases: xss
CVE-2015-9231: iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature was added to iTerm2 version 3.0.0 (and unreleased 2.9.x versions such as 2.9.20150717) that resulted in a potential information disclosure. In an attempt to see whether the text under the cursor (or selected text) was a URL, the text would be sent as an unencrypted DNS query. This has the potential to result in passwords and other sensitive information being sent in cleartext without the user being aware.
Key phrases: discover passwords by reading DNS queries, information disclosure, sensitive information
CVE-2015-9232: The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Delegation API intent. Also, the Good Dynamic application activation process does not attempt to detect malicious activation attempts involving modified names beginning with a com.good.gdgma substring. Consequently, an attacker could obtain access to intranet data. This issue is only relevant in cases where the user has already downloaded a malicious Android application.
Key phrases: obtain access, signature protection, malicious activation attempts
CVE-2015-9233: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with resultant XSS, related to cp_contactformpp.php and cp_contactformpp_admin_int_list.inc.php.
Key phrases: csrf, xss
CVE-2015-9234: The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection via the cp_contactformpp_id parameter to cp_contactformpp.php.
Key phrases: sql injection
CVE-2015-9235: In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family).
Key phrases: bypass verification
CVE-2015-9236: Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one route has it off, and the route is not GET, the OPTIONS prefetch request will return the default CORS headers and then the actual request will go through and return no CORS headers. This defeats the purpose of turning CORS on the route.
Key phrases: cross-origin activities
CVE-2015-9238: secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.
CVE-2015-9239: ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in.
Key phrases: denial of service (ReDoS), regular expression denial of service (redos)
CVE-2015-9240: Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched. A correct password is still required to complete sign in.
CVE-2015-9241: Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be raised. Instead of sending a HTTP 500 error back to the sender, hapi node module before 11.1.3 will continue to hold the socket open until timed out (default node timeout is 2 minutes).
CVE-2015-9242: Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to raise an exception. This leads to a crash and denial of service in ecstatic when this input is passed into the server via the If-Modified-Since header.
Key phrases: denial of service, crash
CVE-2015-9243: When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined and when a higher level config included security restrictions (like origin), a higher level config that included security restrictions (like origin) would have those restrictions overridden by less restrictive defaults (e.g. origin defaults to all origins `*`).
CVE-2015-9244: Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to SQL Injection.
Key phrases: sql injection
CVE-2015-9245: Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.
Key phrases: specify arbitrary URLs, specify arbitrary URLs from which to load and, insecure default configuration
CVE-2015-9246: An issue was discovered in Skybox Platform before 7.5.201. Remote Unauthenticated Code Execution exists via a WAR archive containing a JSP file. The WAR file is sent to /skyboxview-softwareupdate/services/CollectorSoftwareUpdate and the JSP file is reached at /opt/skyboxview/thirdparty/jboss/server/web/work/jboss.web/localhost.
Key phrases: remote unauthenticated code execution
CVE-2015-9247: An issue was discovered in Skybox Platform before 7.5.401. Reflected cross-site scripting vulnerabilities exist in /skyboxview/webservice/services/VersionRepositoryWebService via a soapenv:Body element, or in the status parameter to login.html.
Key phrases: cross-site scripting
CVE-2015-9248: An issue was discovered in Skybox Platform before 7.5.201. Stored cross-site scripting vulnerabilities exist in the title, Comments, or Description field to /skyboxview/webskybox/tickets in Change Manager.
Key phrases: cross-site scripting
CVE-2015-9249: An issue was discovered in Skybox Platform before 7.5.201. SQL Injection exists in /skyboxview/webservice/services/VersionWebService via a soapenv:Body element.
Key phrases: sql injection
CVE-2015-9250: An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter.
Key phrases: directory traversal
CVE-2015-9251: jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Key phrases: cross-site scripting (xss), text javascript responses
CVE-2015-9252: An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral() in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc.
Key phrases: endless recursion, stack exhaustion
CVE-2015-9253: An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master process restarts a child process in an endless loop when using program execution functions (e.g., passthru, exec, shell_exec, or system) with a non-blocking STDIN stream, causing this master process to consume 100% of the CPU, and consume disk space with a large volume of error logs, as demonstrated by an attack by a customer of a shared-hosting facility.
Key phrases: non-blocking stdin stream
CVE-2015-9254: Datto ALTO and SIRIS devices have a default VNC password.
Key phrases: vnc password
CVE-2015-9255: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
Key phrases: obtain sensitive information, obtain sensitive information about data
CVE-2015-9256: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
Key phrases: obtain sensitive information, obtain sensitive information via access to device/, device vm restore mount points
CVE-2015-9257: BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.
Key phrases: xss
CVE-2015-9258: In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because an attacker controls the field specifying the signature algorithm, they might (for example) be able to forge a signature by forcing a misinterpretation of an RSA-PSS key as Ed25519 elliptic-curve data.
Key phrases: signature algorithm not matched to key
CVE-2015-9259: In Docker Notary before 0.1, the checkRoot function in gotuf/client/client.go does not check expiry of root.json files, despite a comment stating that it does. Even if a user creates a new root.json file after a key compromise, an attacker can produce update files referring to an old root.json file.
Key phrases: key compromise
CVE-2015-9260: An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjects URI, as demonstrated by appending a payload to a pages/showObjects/2/0/0/leafs URI.
Key phrases: cross-site scripting (xss)
CVE-2015-9261: huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.
Key phrases: application crash
CVE-2015-9262: _XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.
Key phrases: cause denial of service or potentially code execution, one-byte heap overflow
CVE-2015-9263: An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows an attacker to upload an arbitrary file, such as a .php file that can execute arbitrary OS commands.
Key phrases: execute arbitrary OS commands, upload an arbitrary file, arbitrary os command
CVE-2015-9264: Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows service.
Key phrases: execute arbitrary code, execute arbitrary code on the administrator's workstation
CVE-2015-9266: The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerability to gain root privileges. This vulnerability is fixed in the following product versions (fixes released in July 2015, all prior versions are affected): airMAX AC 7.1.3; airMAX M (and airRouter) 5.6.2 XM/XW/TI, 5.5.11 XM/TI, and 5.5.10u2 XW; airGateway 1.1.5; airFiber AF24/AF24HD 2.2.1, AF5x 3.0.2.1, and AF5 2.2.1; airOS 4 XS2/XS5 4.0.4; and EdgeSwitch XP (formerly TOUGHSwitch) 1.3.2.
Key phrases: write arbitrary files, gain root privileges, upload and write arbitrary files using directory traversal, directory traversal techniques
CVE-2015-9267: Nullsoft Scriptable Install System (NSIS) before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program.
Key phrases: overwrite files, a local attack in which either a plugin, temporary folder locations
CVE-2015-9268: Nullsoft Scriptable Install System (NSIS) before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime.
Key phrases: unsafe implicit linking
CVE-2015-9269: The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.
Key phrases: obtain sensitive information, obtain sensitive information because the content of a
CVE-2015-9270: XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter.
Key phrases: xss
CVE-2015-9271: The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different vulnerability than CVE-2014-1905.
Key phrases: execute arbitrary code, execute arbitrary code because vc/vw_upload.php considers
CVE-2015-9272: The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code.
Key phrases: execute arbitrary code, execute arbitrary code because vp/vw_upload.php considers
CVE-2015-9273: The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking.
Key phrases: xss
CVE-2015-9274: HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-table.hh, hb-ot-layout-gsub-table.hh, and hb-ot-layout-gsubgpos-private.hh.
Key phrases: denial of service (invalid read of two bytes and application crash), cause a denial of service (invalid read
CVE-2015-9275: ARC 5.21q allows directory traversal via a full pathname in an archive file.
Key phrases: directory traversal via a full pathname in an
CVE-2015-9276: SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker's email, which contained a malicious payload. Therefore, users' passwords could be reset by using an XSS attack, as the password reset page did not need the current password.
Key phrases: xss, malicious payload
CVE-2015-9277: MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled.
Key phrases: Directory Traversal for reading the messages of other, directory traversal
CVE-2015-9278: MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request.
Key phrases: Privilege Escalation because admin accounts could be created, privilege escalation, consequence
CVE-2015-9279: MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message.
Key phrases: Stored XSS via malformed use of "<, stored xss
CVE-2015-9280: MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter.
Key phrases: XXE via an XML document in the request.aspx, xxe
CVE-2015-9281: Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page.
Key phrases: reflected XSS on the Timeout page, xss
CVE-2015-9282: The Pie Chart Panel plugin through 2019-01-02 for Grafana is vulnerable to XSS via legend data or tooltip data. When a chart is included in a Grafana dashboard, this vulnerability could allow an attacker to gain remote unauthenticated access to the dashboard.
Key phrases: gain remote unauthenticated access, gain remote unauthenticated access to the dashboard, xss
CVE-2015-9284: The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.
Key phrases: be connected without user intent, cross-site request forgery
CVE-2015-9285: esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI.
Key phrases: xss
CVE-2015-9286: Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS.
Key phrases: xss
CVE-2015-9287: Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response message ("WLS-Response") can be manipulated by an attacker. The "kid" field is not signed like the rest of the message, and manipulation is therefore trivial. The "kid" field should only ever represent an integer. However, it is possible to provide any string value. An attacker could use this to their advantage to force the application agent to load the RSA public key required for message integrity checking from an unintended location.
Key phrases: directory traversal, integrity
CVE-2015-9288: The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online services via a victim's credentials
Key phrases: read messages or access online services via a
CVE-2015-9289: In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends/cx24116.c. The maximum size for a DiSEqC command is 6, according to the userspace API. However, the code allows larger values such as 23.
Key phrases: larger values such as 23, buffer overflow
CVE-2015-9290: In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no check that the new values of cur and limit are sensible before going to Again.
Key phrases: buffer over-read, buffer over read
CVE-2015-9291: cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221).
Key phrases: prevent arbitrary file, arbitrary file-read operations, arbitrary file read
CVE-2015-9292: 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter).
Key phrases: CSRF via portalchannel_ajax.php (id or code, csrf
CVE-2015-9293: The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
Key phrases: xss
CVE-2015-9294: The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances.
Key phrases: xss
CVE-2015-9295: The contact-form-plugin plugin before 3.96 for WordPress has XSS.
Key phrases: xss
CVE-2015-9296: The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
Key phrases: xss
CVE-2015-9297: The events-manager plugin before 5.6 for WordPress has XSS.
Key phrases: xss
CVE-2015-9298: The events-manager plugin before 5.6 for WordPress has code injection.
Key phrases: code injection
CVE-2015-9299: The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
Key phrases: dom xss
CVE-2015-9300: The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
Key phrases: xss issues
CVE-2015-9301: The liveforms plugin before 3.2.0 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9302: The simple-fields plugin before 1.4.11 for WordPress has XSS.
Key phrases: xss
CVE-2015-9303: The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
Key phrases: xss
CVE-2015-9304: The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.
Key phrases: xss
CVE-2015-9305: The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions.
Key phrases: xss
CVE-2015-9306: The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
Key phrases: xss
CVE-2015-9307: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
Key phrases: csrf
CVE-2015-9308: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
Key phrases: csrf
CVE-2015-9309: The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
Key phrases: csrf
CVE-2015-9310: The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
Key phrases: sql injection issues
CVE-2015-9311: The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
Key phrases: xss
CVE-2015-9312: The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
Key phrases: xss
CVE-2015-9313: The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
Key phrases: sql injection
CVE-2015-9314: The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
Key phrases: xss
CVE-2015-9315: The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9316: The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppolls_ajax_request via the poll_id parameter.
Key phrases: sql injection
CVE-2015-9317: The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
Key phrases: xss
CVE-2015-9318: The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.
Key phrases: security issue
CVE-2015-9319: The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
Key phrases: xss
CVE-2015-9320: The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
Key phrases: xss
CVE-2015-9321: The shortcode-factory plugin before 1.1.1 for WordPress has XSS via add_query_arg.
Key phrases: xss
CVE-2015-9322: The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.
Key phrases: csrf
CVE-2015-9323: The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9324: The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9325: The visitors-online plugin before 0.4 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9326: The wp-business-intelligence-lite plugin before 1.6.3 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9327: The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS.
Key phrases: xss
CVE-2015-9328: The profile-builder plugin before 2.2.5 for WordPress has XSS.
Key phrases: xss
CVE-2015-9329: The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
Key phrases: xss
CVE-2015-9330: The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.
Key phrases: blind sql injection
CVE-2015-9331: The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
Key phrases: unauthenticated requests
CVE-2015-9332: The uninstall plugin before 1.2 for WordPress has CSRF to delete all tables via the wp-admin/admin-ajax.php?action=uninstall URI.
Key phrases: csrf
CVE-2015-9333: The cforms2 plugin before 14.6.10 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9334: The email-newsletter plugin through 20.15 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9335: The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.
Key phrases: sql injection
CVE-2015-9336: The clean-login plugin before 1.5.1 for WordPress has reflected XSS.
Key phrases: xss
CVE-2015-9337: The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX.
Key phrases: access control
CVE-2015-9338: The wp-file-upload plugin before 2.5.0 for WordPress has insufficient restrictions on upload of .php files.
Key phrases: insufficient restrictions, file upload
CVE-2015-9339: The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files.
Key phrases: insufficient restrictions, file upload
CVE-2015-9340: The wp-file-upload plugin before 3.0.0 for WordPress has insufficient restrictions on upload of php, js, pht, php3, php4, php5, phtml, htm, html, and htaccess files.
Key phrases: file upload
CVE-2015-9341: The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files.
Key phrases: insufficient restrictions, file upload
CVE-2015-9342: The wp-rollback plugin before 1.2.3 for WordPress has XSS.
Key phrases: xss
CVE-2015-9343: The wp-rollback plugin before 1.2.3 for WordPress has CSRF.
Key phrases: csrf
CVE-2015-9344: The link-log plugin before 2.1 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9345: The link-log plugin before 2.0 for WordPress has HTTP Response Splitting.
Key phrases: http response splitting
CVE-2015-9346: The cp-polls plugin before 1.0.5 for WordPress has XSS.
Key phrases: xss
CVE-2015-9347: The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
Key phrases: xss
CVE-2015-9348: The sell-downloads plugin before 1.0.8 for WordPress has insufficient restrictions on brute-force guessing of purchase IDs.
Key phrases: brute-force guessing
CVE-2015-9349: The ckeditor-for-wordpress plugin before 4.5.3.1 for WordPress has reflected XSS in the "built-in (old)" file browser.
Key phrases: xss
CVE-2015-9350: The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button.
Key phrases: xss
CVE-2015-9351: The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button.
Key phrases: shortcode execution
CVE-2015-9352: The wp-polls plugin before 2.72 for WordPress has SQL injection.
Key phrases: sql injection
CVE-2015-9353: The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.
Key phrases: sql injection
CVE-2015-9354: The gigpress plugin before 2.3.11 for WordPress has XSS.
Key phrases: xss
CVE-2015-9355: The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area.
Key phrases: xss
CVE-2015-9356: The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.
Key phrases: xss
CVE-2015-9357: The akismet plugin before 3.1.5 for WordPress has XSS.
Key phrases: xss
CVE-2015-9358: The feedwordpress plugin before 2015.0514 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9359: The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9360: The updraftplus plugin before 1.9.64 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9361: The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9362: The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9363: iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9364: 2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9365: Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9366: Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9367: Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9368: Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9369: Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9370: Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9371: Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9372: Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9373: PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9374: Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9375: Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9376: iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9377: iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9378: iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9379: iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
Key phrases: xss
CVE-2015-9380: The photo-gallery plugin before 1.2.42 for WordPress has CSRF.
Key phrases: csrf
CVE-2015-9381: FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2015-9382: FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
Key phrases: buffer over-read, buffer over read
CVE-2015-9383: FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
Key phrases: heap-based buffer over-read, buffer over read
CVE-2015-9384: The relevant plugin before 1.0.8 for WordPress has XSS.
Key phrases: xss
CVE-2015-9385: The quotes-and-tips plugin before 1.20 for WordPress has XSS.
Key phrases: xss
CVE-2015-9386: The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
Key phrases: xss
CVE-2015-9387: The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
Key phrases: wp-admin options-general.php csrf
CVE-2015-9388: The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
Key phrases: wp-admin edit.php csrf, xss
CVE-2015-9389: The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
Key phrases: xss
CVE-2015-9390: The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.
Key phrases: privilege escalation
CVE-2015-9391: The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.
Key phrases: xss
CVE-2015-9392: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
Key phrases: xss
CVE-2015-9393: The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
Key phrases: xss
CVE-2015-9394: The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
Key phrases: csrf
CVE-2015-9395: The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
Key phrases: sql injection
CVE-2015-9396: The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.
Key phrases: xss
CVE-2015-9397: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.
Key phrases: wp-admin tools.php deletegc xss
CVE-2015-9398: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
Key phrases: sql injection
CVE-2015-9399: The wp-stats-dashboard plugin through 2.9.4 for WordPress has admin/graph_trend.php type SQL injection.
Key phrases: sql injection
CVE-2015-9400: The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection.
Key phrases: sql injection
CVE-2015-9401: The websimon-tables plugin through 1.3.4 for WordPress has wp-admin/tools.php edit_style id XSS.
Key phrases: wp-admin tools.php edit_style id xss
CVE-2015-9402: The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
Key phrases: arbitrary file upload
CVE-2015-9403: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_location XSS.
Key phrases: neuvoo_location xss
CVE-2015-9404: The neuvoo-jobroll plugin 2.0 for WordPress has neuvoo_keywords XSS.
Key phrases: neuvoo_keywords xss
CVE-2015-9405: The wp-piwik plugin before 1.0.5 for WordPress has XSS.
Key phrases: xss
CVE-2015-9406: Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files parameter to css/css.php.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2015-9407: The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS.
Key phrases: xss
CVE-2015-9408: The xpinner-lite plugin through 2.2 for WordPress has wp-admin/options-general.php CSRF with resultant XSS.
Key phrases: csrf, xss
CVE-2015-9409: The alo-easymail plugin before 2.6.01 for WordPress has CSRF with resultant XSS in pages/alo-easymail-admin-options.php.
Key phrases: csrf, xss
CVE-2015-9410: The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.
Key phrases: xss
CVE-2015-9411: The Postmatic plugin before 1.4.6 for WordPress has XSS.
Key phrases: xss
CVE-2015-9412: The Royal-Slider plugin before 3.2.7 for WordPress has XSS via the rstype parameter.
Key phrases: xss
CVE-2015-9413: The eshop plugin through 6.3.13 for WordPress has CSRF with resultant XSS via the wp-admin/admin.php?page=eshop-downloads.php title parameter.
Key phrases: csrf, xss
CVE-2015-9414: The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter.
Key phrases: xss
CVE-2015-9415: The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.
Key phrases: remote file inclusion
CVE-2015-9416: The sitepress-multilingual-cms (WPML) plugin 2.9.3 to 3.2.6 for WordPress has XSS via the Accept-Language HTTP header.
Key phrases: xss
CVE-2015-9417: The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
Key phrases: csrf, xss
CVE-2015-9418: The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes.
Key phrases: delete quizzes, csrf
CVE-2015-9419: The captain-slider plugin 1.0.6 for WordPress has XSS via a Title or Caption section.
Key phrases: xss
CVE-2015-9420: The soundcloud-is-gold plugin before 2.3.2 for WordPress has XSS via the wp-admin/admin-ajax.php?action=get_soundcloud_player id parameter.
Key phrases: xss
CVE-2015-9421: The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.
Key phrases: csrf, xss
CVE-2015-9422: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.
Key phrases: csrf, xss
CVE-2015-9423: The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount, or plugneditcontent parameters.
Key phrases: xss
CVE-2015-9424: The multicons plugin before 3.0 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=multicons%2Fmulticons.php global_url or admin_url parameter.
Key phrases: csrf, xss
CVE-2015-9425: The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=opanda-item&page=license-manager-sociallocker-next licensekey parameter.
Key phrases: csrf, xss
CVE-2015-9426: The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.
Key phrases: csrf, xss
CVE-2015-9427: The googmonify plugin through 0.5.1 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=googmonify.php PID or AID parameter.
Key phrases: csrf, xss
CVE-2015-9428: The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address, or lp-niche parameters.
Key phrases: csrf, xss
CVE-2015-9429: The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.
Key phrases: csrf, xss
CVE-2015-9430: The crazy-bone plugin before 0.6.0 for WordPress has XSS via the User-Agent HTTP header.
Key phrases: xss
CVE-2015-9431: The qtranslate-x plugin before 3.4.4 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=qtranslate-x json_config_files or json_custom_i18n_config parameter.
Key phrases: csrf, xss
CVE-2015-9432: The alpine-photo-tile-for-instagram plugin before 1.2.7.6 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=alpine-photo-tile-for-instagram-settings tab parameter.
Key phrases: csrf, xss
CVE-2015-9433: The wp-social-bookmarking-light plugin before 1.7.10 for WordPress has CSRF with resultant XSS via configuration parameters for Tumblr, Twitter, Facebook, etc. in wp-admin/options-general.php?page=wp-social-bookmarking-light%2Fmodules%2Fadmin.php.
Key phrases: csrf, xss
CVE-2015-9434: The kiwi-logo-carousel plugin before 1.7.2 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?post_type=kwlogos&page=kwlogos_settings tab or tab_flags_order parameter.
Key phrases: csrf, xss
CVE-2015-9435: The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers.
Key phrases: incorrect generation of random numbers
CVE-2015-9436: The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.
Key phrases: xss
CVE-2015-9437: The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
Key phrases: csrf, xss
CVE-2015-9438: The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_base, widget_number, or instance parameter.
Key phrases: xss
CVE-2015-9439: The addthis plugin before 5.0.13 for WordPress has CSRF with resultant XSS via the wp-admin/options-general.php?page=addthis_social_widget pubid parameter.
Key phrases: csrf, xss
CVE-2015-9440: The monetize plugin through 1.03 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=monetize-zones-new.
Key phrases: csrf, xss
CVE-2015-9441: The bookmarkify plugin 2.9.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=bookmarkify.php.
Key phrases: csrf, xss
CVE-2015-9442: The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.
Key phrases: csrf, xss
CVE-2015-9443: The accurate-form-data-real-time-form-validation plugin 1.2 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=Accu_Data_WP.
Key phrases: csrf, xss
CVE-2015-9444: The altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/ PATH_SELF.
Key phrases: xss
CVE-2015-9445: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.
Key phrases: csrf, sql injection
CVE-2015-9446: The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.
Key phrases: sql injection
CVE-2015-9447: The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.
Key phrases: csrf, sql injection
CVE-2015-9448: The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter.
Key phrases: sql injection
CVE-2015-9449: The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php account_id parameter.
Key phrases: sql injection
CVE-2015-9450: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.
Key phrases: sql injection
CVE-2015-9451: The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.
Key phrases: sql injection
CVE-2015-9452: The nex-forms-express-wp-form-builder plugin before 4.6.1 for WordPress has SQL injection via the wp-admin/admin.php?page=nex-forms-main nex_forms_Id parameter.
Key phrases: sql injection
CVE-2015-9453: The broken-link-manager plugin before 0.6.0 for WordPress has XSS via the HTTP Referer or User-Agent header to a URL that does not exist.
Key phrases: xss
CVE-2015-9454: The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter.
Key phrases: sql injection
CVE-2015-9455: The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.
Key phrases: csrf, directory traversal
CVE-2015-9456: The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.
Key phrases: incorrect access control
CVE-2015-9457: The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.
Key phrases: sql injection
CVE-2015-9458: The searchterms-tagging-2 plugin through 1.535 for WordPress has SQL injection via the pk_stt2_db_get_popular_terms count parameter exploitable via CSRF.
Key phrases: sql injection, csrf
CVE-2015-9459: The searchterms-tagging-2 plugin through 1.535 for WordPress has XSS via the wp-admin/options-general.php count parameter.
Key phrases: xss
CVE-2015-9460: The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
Key phrases: sql injection
CVE-2015-9461: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.
Key phrases: sql injection
CVE-2015-9462: The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat_id parameter.
Key phrases: sql injection
CVE-2015-9463: The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
Key phrases: directory traversal
CVE-2015-9464: The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path parameter.
Key phrases: directory traversal
CVE-2015-9465: The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via the set_id parameter.
Key phrases: sql injection
CVE-2015-9466: The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTTP_X_FORWARDED_FOR, HTTP_X_FORWARDED, HTTP_FORWARDED_FOR, or HTTP_FORWARDED variable.
Key phrases: sql injection
CVE-2015-9467: The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parameter.
Key phrases: wpsldelurl, wpslediturl, sql injection
CVE-2015-9468: The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action.
Key phrases: xss
CVE-2015-9469: The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.
Key phrases: xss
CVE-2015-9470: The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter.
Key phrases: directory traversal
CVE-2015-9471: The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload.
Key phrases: arbitrary file upload
CVE-2015-9472: The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header.
Key phrases: referrers.php xss