CVE-2015-9444

The altos-connect plugin 1.3.0 for WordPress has XSS via the wp-content/plugins/altos-connect/jquery-validate/demo/demo/captcha/index.php/ PATH_SELF.

• CWE-79

• http://packetstormsecurity.com/files/132908/Exploit, Third Party Advisory, VDB Entry
• https://wordpress.org/plugins/altos-connect/#developersProduct, Release Notes
• http://packetstormsecurity.com/files/132908/Exploit, Third Party Advisory, VDB Entry
• https://wordpress.org/plugins/altos-connect/#developersProduct, Release Notes

Published

Sep 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-9438The display-widgets plugin before 2.04 for WordPress has XSS…5.4
• CVE-2015-9439The addthis plugin before 5.0.13 for WordPress has CSRF with…4.8
• CVE-2015-9440The monetize plugin through 1.03 for WordPress has CSRF with…6.5
• CVE-2015-9441The bookmarkify plugin 2.9.2 for WordPress has CSRF with res…6.5
• CVE-2015-9442The avenirsoft-directdownload plugin 1.0 for WordPress has C…6.5
• CVE-2015-9443The accurate-form-data-real-time-form-validation plugin 1.2 …6.5
• CVE-2015-9445The unite-gallery-lite plugin before 1.5 for WordPress has C…8.8
• CVE-2015-9446The unite-gallery-lite plugin before 1.5 for WordPress has S…8.8
• CVE-2015-9447The unite-gallery-lite plugin before 1.5 for WordPress has C…6.5
• CVE-2015-9448The sendpress plugin before 1.2 for WordPress has SQL Inject…8.8
• CVE-2015-9449The microblog-poster plugin before 1.6.2 for WordPress has S…7.2
• CVE-2015-9450The plugmatter-optin-feature-box-lite plugin before 2.0.14 f…9.8