Lucene search

K
cvelistMitreCVELIST:CVE-2015-2792
HistoryMar 30, 2015 - 2:00 p.m.

CVE-2015-2792

2015-03-3014:00:00
mitre
www.cve.org
4
wpml plugin
security vulnerability
remote attackers

AI Score

6.9

Confidence

Low

EPSS

0.016

Percentile

87.6%

The WPML plugin before 3.1.9 for WordPress does not properly handle multiple actions in a request, which allows remote attackers to bypass nonce checks and perform arbitrary actions via a request containing an action POST parameter, an action GET parameter, and a valid nonce for the action GET parameter.

AI Score

6.9

Confidence

Low

EPSS

0.016

Percentile

87.6%

Related for CVELIST:CVE-2015-2792