CVE-2015-9380

The photo-gallery plugin before 1.2.42 for WordPress has CSRF...

CVE-2015-9380

The CVE-2015-9380 entry corresponds to a CSRF vulnerability in the WordPress plugin Photo Gallery (versions before 1.2.42). The issue is described as a cross-site request forgery in the photo-gallery plugin, enabling unauthorized actions without authentication. Multiple sources (NVD description, ...

FreeBSD : RDoc -- multiple jQuery vulnerabilities (ed8d5535-ca78-11e9-980b-999ff59c22ea)

Ruby news : There are multiple vulnerabilities about Cross-Site Scripting XSS in jQuery shipped with RDoc which bundled in Ruby. All Ruby users are recommended to update Ruby to the latest release which includes the fixed version of RDoc. The following vulnerabilities have been reported...

CVE-2015-9334

creationtimestamp| type| source ---|---|--- 2019-08-29 16:33:41+00:00| seen| https://t.me/cibsecurity/6436...

CVE-2015-9359

The CVE-2015-9359 entry concerns the WordPress Jetpack plugin (pre-3.4.3) with a cross-site scripting (XSS) vulnerability exploitable via add_query_arg() and remove_query_arg(). Affected product: Jetpack plugin for WordPress; vulnerable component/behavior: input/output handling around query arg f...

CVE-2015-9379

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9372

Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9370

Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9356

The wp-vipergb plugin before 1.3.16 for WordPress has XSS via addqueryarg and removequeryarg, a different issue than CVE-2014-9460...

CVE-2015-9355

The two-factor-authentication plugin before 1.1.10 for WordPress has XSS in the admin area...

Sql injection

The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066...

CVE-2015-9379

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9378

The CVE-2015-9378 entry concerns iThemes Builder Theme Market for WordPress, where a cross-site scripting (XSS) vulnerability exists in the add_query_arg() and remove_query_arg() paths. Affected product/version: iThemes Builder Theme Market prior to 5.1.27. Root cause: insufficient input handling...

CVE-2015-9377

Vulnerability: iThemes Builder Theme Depot for WordPress is affected by an XSS flaw in add_query_arg() and remove_query_arg(). Version range affected is prior to 5.0.30. Root cause details are not elaborated beyond the XSS via query argument handling. Impact is described as cross-site scripting, ...

CVE-2015-9376

The CVE-2015-9376 entry concerns iThemes Mobile for WordPress (before 1.2.8). The underlying issue is an XSS in add_query_arg() and remove_query_arg() that can be triggered through the affected plugin. Impact is XSS (as stated in multiple sources); exploitation details are not provided in the doc...

CVE-2015-9376

iThemes Mobile before 1.2.8 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9375

CVE-2015-9375 affects the Table Rate Shipping Add-on for WordPress/iThemes Exchange (before 1.1.0). The vulnerability is an XSS via add_query_arg() and remove_query_arg(), with partial integrity impact (NVD CVSS2: I:P; CVSS3: I:L/C:L). Mitigations/patch: upgrade to version 1.1.0 or later (per sou...

CVE-2015-9375

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via addqueryarg and removequeryarg...

CVE-2015-9374

The CVE-2015-9374 entry concerns the Stripe Add-on for iThemes Exchange (WordPress) with an XSS vulnerability reported as occurring before version 1.2.0. The underlying issue is an XSS via add_query_arg() and remove_query_arg(), indicating input handling flaws in the plugin’s URL parameter proces...

CVE-2015-9373

CVE-2015-9373 affects the PayPal Pro Add-on for iThemes Exchange on WordPress before version 1.1.0. The vulnerability is a reflected XSS via add_query_arg() and remove_query_arg(), as described in the NVD entry. The document does not provide exploitable details beyond this XSS disclosure, nor exp...