CVE-2026-15285

creationtimestamp| type| source ---|---|--- 2026-07-10 19:55:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcwiymgfs26...

CVE-2025-15285

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication and checkCategoryAuthentication functions in all versions up to, and including, 2.2.1. These authorization functions only implement...

CVE-2025-15285

creationtimestamp| type| source ---|---|--- 2026-02-04 09:17:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdzk5ekgml25...

CVE-2020-15285

CVE-2020-15285 entry is rejected/not used per the Initial Description.

CVE-2019-15285

creationtimestamp| type| source ---|---|--- 2020-09-23 08:55:27+00:00| seen| https://t.me/cibsecurity/14844...

CVE-2017-15285

X-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 are vulnerable to Remote Code Execution due to improper validation of uploaded file extensions before saving locally. The issue can be exploited by anyone with Vendor access or higher by uploading an image file in a product catalog attachment, then uplo...