CVE-2015-9469

The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id.

• CWE-79

• https://packetstormsecurity.com/files/132910/Exploit, Third Party Advisory, VDB Entry
• https://wordpress.org/plugins/content-grabber/#developersProduct, Third Party Advisory
• https://packetstormsecurity.com/files/132910/Exploit, Third Party Advisory, VDB Entry
• https://wordpress.org/plugins/content-grabber/#developersProduct, Third Party Advisory

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-9463The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPr…7.5
• CVE-2015-9464The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 …7.5
• CVE-2015-9465The yet-another-stars-rating plugin before 0.9.1 for WordPre…8.8
• CVE-2015-9466The wti-like-post plugin before 1.4.3 for WordPress has WtiL…9.8
• CVE-2015-9467The broken-link-manager plugin before 0.5.0 for WordPress ha…9.8
• CVE-2015-9468The broken-link-manager plugin 0.4.5 for WordPress has XSS v…6.1
• CVE-2015-9470The history-collection plugin through 1.1.1 for WordPress ha…7.5
• CVE-2015-9471The dzs-zoomsounds plugin through 2.0 for WordPress has admi…9.8
• CVE-2015-9472The incoming-links plugin before 0.9.10b for WordPress has r…6.1
• CVE-2015-9473The estrutura-basica theme through 2015-09-13 for WordPress …7.5
• CVE-2015-9474The Simpolio theme 1.3.2 for WordPress has insufficient rest…8.8
• CVE-2015-9475The Pont theme 1.5 for WordPress has insufficient restrictio…8.8