EUVD-2015-1628

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cross-site scripting vulnerability in FancyBox for WordPress plugin before version 3.0.3 allows remote attacks.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2015-1494	16 Feb 201500:00	–	circl
CNVD	Unspecified Vulnerability in WordPress Plugin FancyBox for WordPress	6 Feb 201500:00	–	cnvd
Check Point Advisories	WordPress FancyBox Plugin Code Injection (CVE-2015-1494)	2 Feb 201500:00	–	checkpoint_advisories
CVE	CVE-2015-1494	17 Feb 201515:00	–	cve
Cvelist	CVE-2015-1494	17 Feb 201515:00	–	cvelist
NVD	CVE-2015-1494	17 Feb 201515:59	–	nvd
OpenVAS	FancyBox for WordPress XSS Vulnerability	2 Mar 201500:00	–	openvas
Patchstack	WordPress FancyBox Plugin 3.0.2 - Stored XSS	16 Feb 201500:00	–	patchstack
Prion	Cross site scripting	17 Feb 201515:59	–	prion
VulnCheck KEV	VulnCheck KEV: CVE-2015-1494	17 Feb 201500:00	–	vulncheck_kev

[
  {
    "enisaIdVendor": [
      {
        "id": "f04b84f5-d2d2-3493-96a4-eab5ef6befa5",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1ec3f98d-da63-3a73-b2fd-713d0e389601",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/72506
openwall	www.openwall.com/lists/oss-security/2015/02/05/10
plugins	www.plugins.trac.wordpress.org/changeset/1082625/
exploit-db	www.exploit-db.com/exploits/36087
wordpress	www.wordpress.org/plugins/fancybox-for-wordpress/changelog/
wordpress	www.wordpress.org/support/topic/possible-malware-2
osvdb	www.osvdb.org/show/osvdb/118543
blog	www.blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

EPSS0.04563