CVE-2015-9428

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:32+00:00| seen| https://t.me/cibsecurity/7017...

CVE-2015-9429

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:31+00:00| seen| https://t.me/cibsecurity/7016...

CVE-2015-9430

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:30+00:00| seen| https://t.me/cibsecurity/7015...

CVE-2015-9431

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:29+00:00| seen| https://t.me/cibsecurity/7014...

CVE-2015-9443

CVE-2015-9443 affects the WordPress plugin accurate-form-data-real-time-form-validation (version 1.2). The issue is described as a CSRF that can lead to a Cross‑Site Scripting (XSS) in the admin interface through wp-admin/options-general.php?page=Accu_Data_WP. Multiple sources (NVD, Red Hat, CNVD...

CVE-2015-9445

CVE-2015-9445 affects the WordPress plugin ** Unite Gallery Lite** (before version 1.5). The issue is a combination of CSRF and SQL injection via wp-admin/admin-ajax.php in the operation unitegallery_ajax_action . This vulnerability is reported with a high impact (NVD CVSS v3.1 base score 8.8) an...

CVE-2015-9446

CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...

CVE-2015-9447

The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...

CVE-2015-9448

The CVE-2015-9448 issue affects the WordPress SendPress plugin (versions prior to 1.2). The vulnerability is an SQL Injection in the wp-admin/admin.php?page=sp-queue listid parameter. Impact per sources includes manipulation/exfiltration of data via the web interface, with CVSS scores indicating ...

CVE-2015-9448

The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter...

CVE-2015-9440

The CVE-2015-9440 entry concerns the WordPress monetize plugin up to version 1.03, which is vulnerable to a CSRF that results in XSS when accessing wp-admin/admin.php?page=monetize-zones-new. Public sources in the connected data identify this as a CSRF/XSS issue affecting the monetize plugin, wit...

CVE-2015-9438

The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dwshowwidget idbase, widgetnumber, or instance parameter...

CVE-2015-9437

The CVE refers to the WordPress Dynamic Widgets plugin, affected versions prior to 1.5.11. The issue is a CSRF that can lead to a stored/XSS outcome via the wp-admin/themes.php?page=dynwid-config page_limit parameter. Several connected sources confirm that this vulnerability concerns Dynamic Widg...

CVE-2015-9436

CVE-2015-9436 affects the WordPress Dynamic Widgets plugin prior to 1.5.11. The issue is an XSS vulnerability caused by insufficient input validation, exploitable via wp-admin/admin-ajax.php?action=term_tree prefix or the widget_id parameter. Impact is client-side code execution in affected conte...

CVE-2015-9435

The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers...

CVE-2015-9435

The CVE-2015-9435 entry concerns the WordPress plugin oauth2-provider (before 3.1.5). The vulnerability arises from incorrect generation of random numbers (insecure pseudorandom number generation) in the plugin, as documented across multiple sources. Impact ranges from Partial confidentiality, in...

CVE-2015-9433

The wp-social-bookmarking-light plugin for WordPress is affected by a CSRF leading to XSS via configuration parameters in wp-admin/options-general.php?page=wp-social-bookmarking-light/modules/admin.php. This vulnerability exists in versions prior to 1.7.10. Root cause: CSRF enables insertion of m...

CVE-2015-9431

The CVE concerns the WordPress plugin qtranslate-x. A CSRF flaw in qtranslate-x prior to version 3.4.4 allows an attacker to induce XSS via requests to wp-admin/options-general.php?page=qtranslate-x with json_config_files or json_custom_i18n_config parameters. This is described in multiple source...

CVE-2015-9449

The microblog-poster plugin before 1.6.2 for WordPress has SQL Injection via the wp-admin/options-general.php?page=microblogposter.php accountid parameter...

CVE-2015-9449

The CVE concerns the WordPress plugin Microblog Poster (versions before 1.6.2). A SQL Injection vulnerability exists in the plugin’s admin page (wp-admin/options-general.php?page=microblogposter.php account_id parameter) due to insufficient input validation. Public sources describe the issue as a...