CVE-2015-9340

The CVE-2015-9340 entry refers to the WordPress wp-file-upload plugin prior to 3.0.0, which has insufficient restrictions on uploading PHP, JS, and related script/markup files (php5, phtml, html, htaccess, etc.). The connected Red Hat, CNVD/CVE, CVE records and WPVulnDB entry corroborate this iss...

CVE-2015-9341

The CVE-2015-9341 entry concerns the WordPress wp-file-upload plugin. Affected component: wp-file-upload plugin for WordPress (versions prior to 3.4.1). Root cause: insufficient restrictions on uploads of .php.js files, enabling potentially executable payloads via file upload. Documented impact: ...

CVE-2015-9341

The wp-file-upload plugin before 3.4.1 for WordPress has insufficient restrictions on upload of .php.js files...

CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...

CVE-2015-9337

The profile-builder plugin before 2.1.4 for WordPress has no access control for activating or deactivating addons via AJAX...

CVE-2015-9337

The CVE concerns the WordPress plugin Profile Builder. Before version 2.1.4, it has no access control for activating or deactivating addons via AJAX, enabling unauthorized addon management and potentially partial integrity impact. Affected software: WordPress Profile Builder plugin (pre-2.1.4). R...

CVE-2015-9333

The cforms2 plugin before 14.6.10 for WordPress has SQL injection...

Sql injection

The appointment-booking-calendar plugin before 1.1.24 for WordPress has SQL injection, a different vulnerability than CVE-2015-7319...

CVE-2015-9336

The CVE-2015-9336 entry concerns the WordPress plugin clean-login, prior to version 1.5.1, which has a reflected XSS vulnerability. Affected component: clean-login plugin for WordPress. Root cause: input reflected in the response without proper sanitization (XSS). Practical impact: potential exec...

CVE-2015-9335

The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling...

CVE-2015-9335

CVE-2015-9335 : A SQL injection vulnerability exists in the WordPress limit-attempts plugin prior to version 1.1.1 during IP address handling. This affects the plugin used with WordPress, enabling potentially unauthorized SQL commands through crafted input. The CVSS indications show high impact (...

CVE-2015-9333

CVE-2015-9333 affects WordPress cforms2 plugin versions prior to 14.6.10, with a SQL injection vulnerability in the plugin’s handling of inputs. Impact per sources includes the ability to execute illegal SQL commands (high severity). Remediation: upgrade to version 14.6.10 or later; no exploitati...

CVE-2015-9327

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...

CVE-2015-9327

The CVE-2015-9327 entry maps to a XSS vulnerability in the Flickr Justified Gallery WordPress plugin prior to version 3.4.0. Multiple connected sources (NVD, Red Hat advisory, CVE lists, and WPVulndb) validate that the flaw is a cross-site scripting issue in this plugin, affecting WordPress envir...

CVE-2015-9327

The flickr-justified-gallery plugin before 3.4.0 for WordPress has XSS...

CVE-2015-9328

CVE-2015-9328 affects the WordPress community plugin Profile Builder (WordPress plugin) prior to version 2.2.5 . The vulnerability is a cross-site scripting (XSS) flaw in the plugin, enabling an attacker to inject and execute client-side code. Multiple sources corroborate the issue as an XSS in t...

CVE-2015-9321

creationtimestamp| type| source ---|---|--- 2019-08-21 16:28:53+00:00| seen| https://t.me/cibsecurity/6256...

CVE-2015-9321

The CVE-2015-9321 entry applies to the WordPress Shortcode Factory plugin prior to 1.1.1, where an XSS vulnerability is triggered via add_query_arg. The affected component is the shortcode-factory plugin in WordPress; the underlying issue is a cross-site scripting flaw that could enable client-si...

CVE-2019-8098

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary...

CVE-2019-8048

Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability. Successful exploitation could lead to arbitrary code...