Search Results (322820 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2015-9394 1 Usersultra 1 Users Ultra Membership 2024-11-21 8.8 High
The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
CVE-2015-9393 1 Usersultra 1 Users Ultra Membership 2024-11-21 5.4 Medium
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.
CVE-2015-9392 1 Usersultra 1 Users Ultra Membership 2024-11-21 5.4 Medium
The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.
CVE-2015-9391 1 Ostenta 1 Yawpp 2024-11-21 6.1 Medium
The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter.
CVE-2015-9390 1 Admin Management Xtended Project 1 Admin Management Xtended 2024-11-21 4.3 Medium
The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.
CVE-2015-9389 1 Mtouch Quiz Project 1 Mtouch Quiz 2024-11-21 5.4 Medium
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
CVE-2015-9388 1 Mtouch Quiz Project 1 Mtouch Quiz 2024-11-21 6.5 Medium
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
CVE-2015-9387 1 Mtouch Quiz Project 1 Mtouch Quiz 2024-11-21 6.5 Medium
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
CVE-2015-9386 1 Mtouch Quiz Project 1 Mtouch Quiz 2024-11-21 6.1 Medium
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
CVE-2015-9385 1 Bestwebsoft 1 Quotes And Tips 2024-11-21 6.1 Medium
The quotes-and-tips plugin before 1.20 for WordPress has XSS.
CVE-2015-9384 1 Bestwebsoft 1 Relevant 2024-11-21 6.1 Medium
The relevant plugin before 1.0.8 for WordPress has XSS.
CVE-2015-9383 3 Canonical, Debian, Freetype 3 Ubuntu Linux, Debian Linux, Freetype 2024-11-21 6.5 Medium
FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c.
CVE-2015-9382 3 Debian, Freetype, Redhat 3 Debian Linux, Freetype, Enterprise Linux 2024-11-21 N/A
FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishandled in an FT_New_Memory_Face operation.
CVE-2015-9381 3 Debian, Freetype, Redhat 3 Debian Linux, Freetype, Enterprise Linux 2024-11-21 N/A
FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c.
CVE-2015-9380 1 10web 1 Photo Gallery 2024-11-21 N/A
The photo-gallery plugin before 1.2.42 for WordPress has CSRF.
CVE-2015-9379 1 Ithemes 1 Builder Style Manager 2024-11-21 N/A
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9378 1 Ithemes 1 Builder Theme Market 2024-11-21 N/A
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9377 1 Ithemes 1 Builder Theme Depot 2024-11-21 N/A
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9376 1 Ithemes 1 Mobile 2024-11-21 N/A
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9375 1 Ithemes 1 Table Rate Shipping 2024-11-21 N/A
Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().