CVE-2015-9534

The CVE-2015-9534 entry describes a cross-site scripting (XSS) vulnerability in the WordPress Easy Digital Downloads Quota theme. Affected are EDD Quota theme builds for WordPress with the following vulnerable branches: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1...

CVE-2015-9535

CVE-2015-9535 concerns the WordPress Easy Digital Downloads (EDD) Shoppette theme. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability caused by misuse of the add_query_arg function. Affected EDD/Shoppette versions include: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x ...

CVE-2015-9535

The Easy Digital Downloads EDD Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...

CVE-2015-9536

The CVE-2015-9536 entry concerns the WordPress Easy Digital Downloads (EDD) Twenty-Twelve theme. The vulnerability is an XSS issue caused by misuse of add_query_arg in multiple EDD versions bundled with the Twenty-Twelve theme: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x be...

CVE-2015-9501

creationtimestamp| type| source ---|---|--- 2019-10-23 02:47:10+00:00| seen| https://t.me/cibsecurity/7578...

CVE-2015-9493

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:31+00:00| seen| https://t.me/cibsecurity/7575...

CVE-2015-9494

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:30+00:00| seen| https://t.me/cibsecurity/7574...

CVE-2015-9495

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:29+00:00| seen| https://t.me/cibsecurity/7573...

CVE-2015-9497

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:28+00:00| seen| https://t.me/cibsecurity/7571...

CVE-2015-9496

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:28+00:00| seen| https://t.me/cibsecurity/7572...

CVE-2015-9498

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:27+00:00| seen| https://t.me/cibsecurity/7570...

CVE-2015-9499

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:26+00:00| seen| https://t.me/cibsecurity/7569 2019-10-28 15:46:25+00:00| seen| https://t.me/cibsecurity/7692 2025-06-12 11:30:37+00:00| confirmed|...

CVE-2015-9500

creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:25+00:00| seen| https://t.me/cibsecurity/7568...

CVE-2015-9501

CVE-2015-9501 affects the WordPress Artificial Intelligence theme up to version 1.2.3 (before 1.2.4). The root cause is Genericons HTML files being placed under the web root, enabling cross-site scripting (XSS). The vulnerability is a DOM/XSS class issue in the theme that can allow an attacker to...

CVE-2015-9499

CVE-2015-9499 affects the WordPress ShowBiz Pro plugin (≤ 1.7.1). The connected template details an authenticated arbitrary file upload to the WordPress admin endpoint (admin-ajax.php) that can upload a PHP file (e.g., inside a ZIP) and lead to remote code execution. Impact described: full server...

CVE-2015-9496

CVE-2015-9496 affects the WordPress plugin “freshmail-newsletter” prior to version 1.6. The vulnerability is a SQL Injection in shortcode.php via the FM_form id= substring, caused by missing validation/sanitization of the shortcode attribute before including it in a SQL query. Exploitation is fea...

CVE-2015-9494

The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier...

CVE-2015-9493

The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...

CVE-2015-9495

The CVE-2015-9495 vulnerability affects the WordPress plugin syndication-links up to version 1.0.2 (before 1.0.3). The root cause is an XSS flaw via the genericons/example.html anchor identifier, enabling injection of client-side script in the browser. Impact is described as partial integrity imp...

CVE-2015-9493

The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues...