8 matches found
EUVD-2015-9314
Malware in sbrugna...
CVE-2015-9474
The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...
WordPress Simpolio theme elevation of privilege vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Simpolio theme is a website theme plugin that supports customizable full-screen backgrounds used in it. WordPress Simpolio...
CVE-2015-9474
The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...
Input validation
The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...
CVE-2015-9474
The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates...
CVE-2015-9474
The CVE-2015-9474 issue affects the WordPress Simpolio theme (version 1.3.2), where insufficient restrictions on option updates enable privilege escalation. The public sets show that an attacker with any authenticated user can trigger the vulnerability by manipulating theme options (e.g., default...
WordPress Simpolio Theme <= 1.3.2 - Privilige Escalation
Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Solution Update the theme...