EUVD-2015-9315

Malware in sbrugna...

CVE-2015-9475

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

WordPress Pont theme elevation of privilege vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Pont theme is a multi-purpose website theme plugin used in it. An elevation of privilege vulnerability exists in WordPress Pont theme. ...

CVE-2015-9475

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

Input validation

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

CVE-2015-9475

The CVE-2015-9475 entry corresponds to the Pont theme 1.5 for WordPress, which has insufficient restrictions on option updates. Connected sources describe a privilege-escalation vulnerability where any authenticated user can trigger option changes (e.g., user roles, registration state) via expose...

CVE-2015-9475

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

CVE-2015-9475: Incorrect Default Permissions

The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...

WordPress Pont Theme <= 1.5 - Privilige Escalation

Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...