CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...

CVE-2015-9415

creationtimestamp| type| source ---|---|--- 2019-09-26 09:01:47+00:00| seen| https://t.me/cibsecurity/7030 2025-09-29 00:37:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2015/CVE-2015-9415.yaml 2025-09-30 21:02:37+00:00| seen|...

CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...

CVE-2015-9415

The bj-lazy-load plugin for WordPress (versions prior to 1.0 ) is vulnerable to Remote File Inclusion (RFI) via the TimThumb component. An attacker can exploit this improper input validation to include and execute remote malicious files, which may lead to remote code execution (RCE) and a complet...

CVE-2015-9415

The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion...