CVE-2015-9398

The GoCodes WordPress plugin (<= 1.3.5) is affected by a SQL injection in wp-admin/tools.php gcid, per CVE-2015-9398. Connected sources also describe an Authenticated XSS and Blind SQL Injection in the same plugin (GoCodes

CVE-2015-9397

CVE-2015-9397 affects the GoCodes WordPress plugin (up to version 1.3.5). The vulnerability is an XSS via wp-admin/tools.php?deletegc in the GoCodes plugin, with authenticated-execution implications (Authenticated XSS per cited WPVulndb entry). Impact described as cross-site scripting; CVSS data ...