CVE-2015-9352

The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...

CVE-2015-9350

The CVE-2015-9350 entry concerns the WordPress plugin Feed Them Social before version 1.7.0, where the Facebook Feeds load more button is vulnerable to reflected cross-site scripting (XSS). The vulnerability allows injected client-side script to be executed in the context of the affected page. Pu...

CVE-2015-9350

The feed-them-social plugin before 1.7.0 for WordPress has reflected XSS in the Facebook Feeds load more button...

CVE-2015-9351

CVE-2015-9351 concerns the WordPress plugin Feed Them Social (before 1.7.0). The vulnerability allows possible shortcode execution in the Facebook Feeds load more button, enabling arbitrary code execution via shortcode handling. Affected component: Feed Them Social plugin for WordPress; root caus...

CVE-2015-9351

The feed-them-social plugin before 1.7.0 for WordPress has possible shortcode execution in the Facebook Feeds load more button...

CVE-2015-9349

The vulnerability CVE-2015-9349 affects the WordPress ckeditor-for-wordpress plugin prior to 4.5.3.1, where the built-in (old) file browser exposes a reflected XSS due to insufficient validation of client-side data. Root cause: lack of proper input validation in the web application. Impact: user-...

CVE-2015-9347

The wp-plotly WordPress plugin (versions prior to 1.0.3) is affected by a cross-site scripting (XSS) vulnerability. The issue arises from insufficient validation of client-side data in the plugin, enabling an attacker to execute client-side code. Some sources reference an authenticated stored XSS...

CVE-2015-9346

CVE-2015-9346 concerns the WordPress cp-polls plugin prior to version 1.0.5, where a cross-site scripting (XSS) vulnerability exists in the plugin’s handling of user-supplied input. The issue is described as an XSS flaw enabling an attacker to execute client-side code within the context of the af...

CVE-2015-9345

CVE-2015-9345 concerns the WordPress plugin Link Log, where versions before 2.0 expose a vulnerability due to HTTP Response Splitting. The affected component is the Link Log plugin for WordPress; the root cause is improper handling/validation of input during command/log construction, enabling hea...

CVE-2015-9344

The CVE-2015-9344 affects the WordPress Link Log plugin prior to version 2.1, with an SQL injection vulnerability caused by lack of validation of externally supplied SQL statements. Public records (NVD/NIST) rate it as high/critical (CVSS2/HIGH, CVSS3/CRITICAL) and indicate network access with no...

CVE-2015-9343

CVE-2015-9343 affects the WordPress wp-rollback plugin, where versions prior to 1.2.3 are vulnerable to CSRF due to insufficient verification that requests originate from a trusted user. Red Hat and CNVD entries explicitly state CSRF; other sources corroborate the same vulnerability in this plugi...

CVE-2015-9342

CVE-2015-9342 affects the WordPress plugin wp-rollback prior to version 1.2.3, with a cross-site scripting (XSS) vulnerability due to insufficient validation of client-side data. Some sources also indicate CSRF risk for older builds (

EulerOS 2.0 SP5 : perl (EulerOS-SA-2019-1800)

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The 1 Sreghop3, 2 Sreghop4, and 3 Sreghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of...

EulerOS 2.0 SP5 : compat-poppler022 (EulerOS-SA-2019-1803)

According to the version of the compat-poppler022 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remote attackers to...

EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1795)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The filecheckmem function in funcs.c in file before 5.23, as used in the Fileinfo component in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x befo...

CVE-2015-9334

The email-newsletter plugin through 20.15 for WordPress has SQL injection...

CVE-2015-9341

The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files...

CVE-2015-9338

CVE-2015-9338 affects the WordPress wp-file-upload plugin prior to version 2.5.0. The vulnerability arises from insufficient restrictions on uploading PHP files, allowing potentially harmful PHP uploads through the plugin. Affected product is the wp-file-upload plugin for WordPress; root cause is...

CVE-2015-9339

The wp-file-upload plugin before 2.7.1 for WordPress has insufficient restrictions on upload of .js files...

CVE-2015-9339

The CVE-2015-9339 entry concerns the WordPress wp-file-upload plugin, affected up to versions prior to 2.7.1. The root cause described across connected sources is insufficient restrictions on uploading JavaScript (.js) files. Exploitation details or real-world impact are not provided in the docum...