CVE-2015-9230

🗓️ 12 Sep 2017 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

In admin/db-backup-security/db-backup-security.php in BulletProof Security plugin before .52.5 for WordPress, XSS possible for remote authenticated admins via DBTablePrefix parameter

Reporter	Title	Published	Views	Family All 7
CNVD	WordPress BulletProof Security Plugin Cross-Site Scripting Vulnerability	13 Sep 201700:00	–	cnvd
Cvelist	CVE-2015-9230	12 Sep 201722:00	–	cvelist
EUVD	EUVD-2015-9083	7 Oct 202500:30	–	euvd
NVD	CVE-2015-9230	12 Sep 201722:29	–	nvd
Prion	Code injection	12 Sep 201722:29	–	prion
SUSE CVE	SUSE CVE-2015-9230	15 Feb 202305:10	–	susecve
WPVulnDB	BulletProof Security <= .50.8 - Script Insertion	30 Sep 201400:00	–	wpvulndb

NVD

Node

ait-pro bulletproof_securityMatch.52.4wordpress

Source	Link
openwall	www.openwall.com/lists/oss-security/2015/10/27/3
packetstormsecurity	www.packetstormsecurity.com/files/135125/BulletProof-Security-.52.4-Cross-Site-Scripting.html
cxsecurity	www.cxsecurity.com/issue/WLB-2016010011
cybersecurityworks	www.cybersecurityworks.com/zerodays/cve-2015-9230-bulletproof.html
wpvulndb	www.wpvulndb.com/vulnerabilities/8224
forum	www.forum.ait-pro.com/forums/topic/bps-changelog/
github	www.github.com/cybersecurityworks/Disclosed/issues/3

Parameter	Position	Path	Description	CWE
DBTablePrefix	query param	admin/db-backup-security/db-backup-security.php	XSS vulnerability via DBTablePrefix parameter in BulletProof Security plugin before 0.52.5	CWE-79

13 May 2026 00:24Current

4.7Medium risk

Vulners AI Score4.7

CVSS 23.5

CVSS 3.14.8

EPSS0.01206

CWE-79