Search vulnerabilities

Expected end of text, found '̇' (at char 8), (line:1, col:9)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,694

CVE-2015-9540

Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Chamilo
Products
Chamilo Lms
CVE-2015-9538

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.

CVSS 3.1 · 6.5 Medium EPSS 10.1% KEV · Not listed
Vendors
Imagely
Products
Nextgen Gallery
CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagely
Products
Nextgen Gallery
CVE-2015-9503

The Modern theme before 1.4.2 for WordPress has XSS via the genericons/example.html anchor identifier.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Webmandesign
Products
Modern Theme
CVE-2015-9502

The Auberge theme before 1.4.5 for WordPress has XSS via the genericons/example.html anchor identifier.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Webmandesign
Products
Auberge Theme
CVE-2015-9499

The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

CVSS 3.1 · 9.8 Critical EPSS 15.8% KEV · Not listed
Vendors
Themepunch
Products
Showbiz Pro
CVE-2015-9498

The wps-hide-login plugin before 1.1 for WordPress has CSRF that affects saving an option value.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Wpserveur
Products
Wps Hide Login
CVE-2015-9497

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ad Inserter Project
Products
Ad Inserter
CVE-2015-9496

The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Freshmail
Products
Freshmail-newsletter
CVE-2015-9492

The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Smartit Premium Responsive Project
Products
Smartit Premium Responsive
CVE-2015-9491

The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Blessing Premium Responsive Project
Products
Blessing Premium Responsive
CVE-2015-9490

The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Gamestheme Premium Project
Products
Gamestheme Premium
CVE-2015-9489

The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

CVSS 3.1 · 7.5 High EPSS 3.1% KEV · Not listed
Vendors
Goodnex Premium Responsive Project
Products
Goodnex Premium Responsive