Search vulnerabilities

Expected end of text, found '\u200b' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,461

CVE-2015-9492

The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Smartit Premium Responsive Project
Products
Smartit Premium Responsive
CVE-2015-9491

The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Blessing Premium Responsive Project
Products
Blessing Premium Responsive
CVE-2015-9490

The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Gamestheme Premium Project
Products
Gamestheme Premium
CVE-2015-9489

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Goodnex Premium Responsive Project
Products
Goodnex Premium Responsive
CVE-2015-9487

The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Almera Responsive Portfolio Project
Products
Almera Responsive Portfolio
CVE-2015-9486

The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Axioma Premium Responsive Project
Products
Axioma Premium Responsive
CVE-2015-9485

The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Accio Responsive Onepage Parallax Site Template Project
Products
Accio Responsive Onepage Parallax Site Template
CVE-2015-9483

The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Invento \/ Architecture Building Agency Template Project
Products
Invento \/ Architecture Building Agency Template
CVE-2015-9481

The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Diplomat \| Political Project
Products
Diplomat \| Political
CVE-2015-9480

The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

CVSS 3.1 · 7.5 High EPSS 12.7% KEV · Not listed
Vendors
Robot-cpa
Products
Robotcpa
CVE-2015-9479

The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request to js/blueimp-jQuery-File-Upload-d45deb1/server/php/index.php.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Advancedcustomfields
Products
Acf Fronted Display