Lucene search
+L

3 matches found

Mend
Mend
•added 2019/10/07 2:25 p.m.•4 views

CVE-2015-9455

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...

8.1CVSS0.00715EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/10/07 2:25 p.m.•35 views

CVE-2015-9455

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...

8.2AI score0.00715EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/07 12:00 a.m.•4 views

CVE-2015-9455: Cross-Site Request Forgery (CSRF)

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...

8.1CVSS7.4AI score0.00715EPSS
SaveExploits0References2
Rows per page
Query Builder