CVE-2015-9397

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS...

CVE-2015-9398

The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection...

CVE-2015-9404

The neuvoo-jobroll plugin 2.0 for WordPress has neuvookeywords XSS...

CVE-2015-9408

CVE-2015-9408 affects the WordPress xpinner-lite plugin up to version 2.2. The vulnerability is a CSRF on wp-admin/options-general.php that results in a Cross-Site Scripting (XSS) condition. Documentation in connected sources confirms the affected software/component but does not provide exploit d...

CVE-2015-9407

CVE-2015-9407 affects the xpinner-lite WordPress plugin (up to version 2.2). The flaw is an XSS in xpinner-lite.php. The connected sources confirm the vulnerability vector as XSS but provide no exploit details or remediation in the cited docs.

CVE-2015-9407

The xpinner-lite plugin through 2.2 for WordPress has xpinner-lite.php XSS...

CVE-2015-9405

CVE-2015-9405 affects the WordPress plugin WP-Piwik (WP-Matomo Integration) prior to version 1.0.5, with a Cross-Site Scripting (XSS) vulnerability reported. The vulnerability is documented across multiple feeds (NVD/NIST, RH Red Hat advisory, OpenVAS/NASL listing, WPVulndb, CVE list) and is desc...

CVE-2015-9404

The CVE-2015-9404 issue concerns the neuvoo-jobroll WordPress plugin (v2.0). The connected sources describe a cross-site scripting (XSS) vulnerability triggered by neuvoo_keywords within the plugin, with activity described as unauthenticated reflected XSS in at least one source (WPVulndb). The or...

CVE-2015-9390

The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wpajax functions are mishandled...

CVE-2015-9384

The relevant plugin before 1.0.8 for WordPress has XSS...

CVE-2015-9385

The quotes-and-tips plugin before 1.20 for WordPress has XSS...

CVE-2015-9387

The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF...

CVE-2015-9402

The CVE-2015-9402 entry concerns the WordPress plugin Users Ultra (and related variants) prior to version 1.5.59, where the uultra-form-cvs-form-conf component allows arbitrary file upload. This is documented across multiple connected records (NVD, RH/Red Hat, CVE lists, and WPVulndb), consistent...

CVE-2015-9402

The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload...

CVE-2015-9401

The CVE-2015-9401 entry concerns the WordPress websimon-tables plugin up to version 1.3.4, which is vulnerable to an XSS flaw in wp-admin/tools.php edit_style id. Connected sources describe it as an Authenticated Reflected Cross-Site Scripting (XSS) vulnerability affecting Websimon Tables

CVE-2015-9400

The wordpress-meta-robots plugin through 2.1 for WordPress has wp-admin/post-new.php text SQL injection...

CVE-2015-9400

CVE-2015-9400 affects the WordPress plugin wordpress-meta-robots (<= 2.1). The vulnerability is an authenticated SQL injection in wp-admin/post-new.php, described as an Authenticated Blind SQL Injection (WPVulDB). Affected component is the plugin itself for WordPress sites, with exploitation r...

CVE-2015-9399

The vulnerability CVE-2015-9399 affects the WordPress plugin wp-stats-dashboard (versions up to 2.9.4). It is an admin/graph_trend.php SQL injection, described as an authenticated vulnerability (authenticated blind SQL injection in WP‑Stats‑Dashboard

CVE-2015-9398

The GoCodes WordPress plugin (<= 1.3.5) is affected by a SQL injection in wp-admin/tools.php gcid, per CVE-2015-9398. Connected sources also describe an Authenticated XSS and Blind SQL Injection in the same plugin (GoCodes

CVE-2015-9397

CVE-2015-9397 affects the GoCodes WordPress plugin (up to version 1.3.5). The vulnerability is an XSS via wp-admin/tools.php?deletegc in the GoCodes plugin, with authenticated-execution implications (Authenticated XSS per cited WPVulndb entry). Impact described as cross-site scripting; CVSS data ...