8 matches found
EUVD-2015-9315
Malware in sbrugna...
CVE-2015-9475
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...
WordPress Pont theme elevation of privilege vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Pont theme is a multi-purpose website theme plugin used in it. An elevation of privilege vulnerability exists in WordPress Pont theme. ...
CVE-2015-9475
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...
Input validation
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...
CVE-2015-9475
The Pont theme 1.5 for WordPress has insufficient restrictions on option updates...
CVE-2015-9475
The CVE-2015-9475 entry corresponds to the Pont theme 1.5 for WordPress, which has insufficient restrictions on option updates. Connected sources describe a privilege-escalation vulnerability where any authenticated user can trigger option changes (e.g., user roles, registration state) via expose...
WordPress Pont Theme <= 1.5 - Privilige Escalation
Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...