2 matches found
CVE-2015-9393
The users-ultra plugin before 1.5.63 for WordPress has XSS via the pdesc parameter...
CVE-2015-9402
The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload...