36252 matches found
CVE-2015-9528
CVE-2015-9528 affects the WordPress Easy Digital Downloads Software Licensing extension. The vulnerability is a cross-site scripting (XSS) caused by misusing add_query_arg in multiple versions: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, a...
CVE-2015-9529
CVE-2015-9529 covers an XSS flaw in the WordPress Easy Digital Downloads Stripe extension due to misuse of add_query_arg. Affected EDD versions include 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Red Hat and CNVD en...
CVE-2015-9530
The CVE targets the WordPress Easy Digital Downloads (EDD) Upload File extension. Root cause: misused add_query_arg leading to cross‑site scripting (XSS). Affected versions (per sources): EDD 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1.11; 2.2.x before 2.2.9; 2.3...
CVE-2015-9531
CVE-2015-9531 concerns the WordPress plugin family Easy Digital Downloads (EDD) Wish Lists extension. The XSS vulnerability arises from misuse of the add_query_arg function in affected releases: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, ...
CVE-2015-9533
The CVE-2015-9533 entry concerns the WordPress Easy Digital Downloads Lattice theme, where XSS is caused by misusing add_query_arg. Affected versions are EDD Lattice 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7. Patch...
CVE-2015-9534
The CVE-2015-9534 entry describes a cross-site scripting (XSS) vulnerability in the WordPress Easy Digital Downloads Quota theme. Affected are EDD Quota theme builds for WordPress with the following vulnerable branches: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x before 2.0.5; 2.1.x before 2.1...
CVE-2015-9535
CVE-2015-9535 concerns the WordPress Easy Digital Downloads (EDD) Shoppette theme. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability caused by misuse of the add_query_arg function. Affected EDD/Shoppette versions include: 1.8.x before 1.8.7; 1.9.x before 1.9.10; 2.0.x ...
CVE-2015-9535
The Easy Digital Downloads EDD Shoppette theme for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x before 2.3.7, has XSS because addqueryarg is misused...
CVE-2015-9536
The CVE-2015-9536 entry concerns the WordPress Easy Digital Downloads (EDD) Twenty-Twelve theme. The vulnerability is an XSS issue caused by misuse of add_query_arg in multiple EDD versions bundled with the Twenty-Twelve theme: 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x be...
CVE-2015-9501
creationtimestamp| type| source ---|---|--- 2019-10-23 02:47:10+00:00| seen| https://t.me/cibsecurity/7578...
CVE-2015-9493
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:31+00:00| seen| https://t.me/cibsecurity/7575...
CVE-2015-9494
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:30+00:00| seen| https://t.me/cibsecurity/7574...
CVE-2015-9495
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:29+00:00| seen| https://t.me/cibsecurity/7573...
CVE-2015-9496
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:28+00:00| seen| https://t.me/cibsecurity/7572...
CVE-2015-9497
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:28+00:00| seen| https://t.me/cibsecurity/7571...
CVE-2015-9498
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:27+00:00| seen| https://t.me/cibsecurity/7570...
CVE-2015-9499
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:26+00:00| seen| https://t.me/cibsecurity/7569 2019-10-28 15:46:25+00:00| seen| https://t.me/cibsecurity/7692 2025-06-12 11:30:37+00:00| confirmed|...
CVE-2015-9500
creationtimestamp| type| source ---|---|--- 2019-10-23 00:27:25+00:00| seen| https://t.me/cibsecurity/7568...
CVE-2015-9501
CVE-2015-9501 affects the WordPress Artificial Intelligence theme up to version 1.2.3 (before 1.2.4). The root cause is Genericons HTML files being placed under the web root, enabling cross-site scripting (XSS). The vulnerability is a DOM/XSS class issue in the theme that can allow an attacker to...