3 matches found
CVE-2015-9455
The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...
8.1CVSS0.00715EPSS
SaveExploits0References2
CVE-2015-9455
The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...
8.2AI score0.00715EPSS
SaveExploits0References2
CVE-2015-9455: Cross-Site Request Forgery (CSRF)
The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfbphotos parameter in a bpfbremovetempimages action...
8.1CVSS7.4AI score0.00715EPSS
SaveExploits0References2
20