CVE-2015-9302

The CVE-2015-9302 entry concerns the WordPress Simple Fields plugin. Affected product: WordPress with the simple-fields plugin versions prior to 1.4.11. Issue: Cross-Site Scripting (XSS) vulnerability in the plugin, as indicated by multiple sources (e.g., Red Hat, CNVD, CVE records). Root cause a...

CVE-2013-7476

The connected advisories confirm a CSRF vulnerability in the WordPress Simple Fields plugin prior to version 1.2, affecting the admin interface. Root cause: CSRF in admin actions could allow unauthorized requests when an authenticated admin visits a malicious page. Impact is described in CVE reco...