36252 matches found
CVE-2015-9423
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:37+00:00| seen| https://t.me/cibsecurity/7022...
CVE-2015-9424
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:36+00:00| seen| https://t.me/cibsecurity/7021...
CVE-2015-9425
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:35+00:00| seen| https://t.me/cibsecurity/7020...
CVE-2015-9426
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:34+00:00| seen| https://t.me/cibsecurity/7019...
CVE-2015-9427
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:33+00:00| seen| https://t.me/cibsecurity/7018...
CVE-2015-9428
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:32+00:00| seen| https://t.me/cibsecurity/7017...
CVE-2015-9429
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:31+00:00| seen| https://t.me/cibsecurity/7016...
CVE-2015-9430
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:30+00:00| seen| https://t.me/cibsecurity/7015...
CVE-2015-9431
creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:29+00:00| seen| https://t.me/cibsecurity/7014...
CVE-2015-9443
CVE-2015-9443 affects the WordPress plugin accurate-form-data-real-time-form-validation (version 1.2). The issue is described as a CSRF that can lead to a Cross‑Site Scripting (XSS) in the admin interface through wp-admin/options-general.php?page=Accu_Data_WP. Multiple sources (NVD, Red Hat, CNVD...
CVE-2015-9445
CVE-2015-9445 affects the WordPress plugin ** Unite Gallery Lite** (before version 1.5). The issue is a combination of CSRF and SQL injection via wp-admin/admin-ajax.php in the operation unitegallery_ajax_action . This vulnerability is reported with a high impact (NVD CVSS v3.1 base score 8.8) an...
CVE-2015-9446
CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...
CVE-2015-9447
The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...
CVE-2015-9448
The CVE-2015-9448 issue affects the WordPress SendPress plugin (versions prior to 1.2). The vulnerability is an SQL Injection in the wp-admin/admin.php?page=sp-queue listid parameter. Impact per sources includes manipulation/exfiltration of data via the web interface, with CVSS scores indicating ...
CVE-2015-9448
The sendpress plugin before 1.2 for WordPress has SQL Injection via the wp-admin/admin.php?page=sp-queue listid parameter...
CVE-2015-9440
The CVE-2015-9440 entry concerns the WordPress monetize plugin up to version 1.03, which is vulnerable to a CSRF that results in XSS when accessing wp-admin/admin.php?page=monetize-zones-new. Public sources in the connected data identify this as a CSRF/XSS issue affecting the monetize plugin, wit...
CVE-2015-9438
The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dwshowwidget idbase, widgetnumber, or instance parameter...
CVE-2015-9437
The CVE refers to the WordPress Dynamic Widgets plugin, affected versions prior to 1.5.11. The issue is a CSRF that can lead to a stored/XSS outcome via the wp-admin/themes.php?page=dynwid-config page_limit parameter. Several connected sources confirm that this vulnerability concerns Dynamic Widg...
CVE-2015-9436
CVE-2015-9436 affects the WordPress Dynamic Widgets plugin prior to 1.5.11. The issue is an XSS vulnerability caused by insufficient input validation, exploitable via wp-admin/admin-ajax.php?action=term_tree prefix or the widget_id parameter. Impact is client-side code execution in affected conte...