2015 CVE Vulnerabilities
8,786 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-10137 | CRITICAL | 9.8 | 3.3% | Jul 22, 2025 | The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing fi... |
| CVE-2015-10139 | HIGH | 8.8 | 1.0% | Jul 19, 2025 | The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import... |
| CVE-2015-10138 | CRITICAL | 9.8 | 2.4% | Jul 19, 2025 | The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type vali... |
| CVE-2015-10136 | HIGH | 7.5 | 2.0% | Jul 19, 2025 | The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' p... |
| CVE-2015-10135 | CRITICAL | 9.8 | 2.8% | Jul 19, 2025 | The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati... |
| CVE-2015-10134 | HIGH | 7.5 | 1.2% | Jul 19, 2025 | The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10... |
| CVE-2015-10133 | HIGH | 7.2 | 1.4% | Jul 19, 2025 | The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 vi... |
| CVE-2015-20112 | LOW | 3.4 | 0.1% | Jun 29, 2025 | RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network. |
| CVE-2015-0849 | LOW | 3.9 | 0.1% | Jun 26, 2025 | pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability. |
| CVE-2015-0843 | CRITICAL | 9.8 | 0.4% | Jun 26, 2025 | yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf. |
| CVE-2015-0842 | CRITICAL | 9.8 | 0.3% | Jun 26, 2025 | yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass. |
| CVE-2015-4582 | MEDIUM | 6.1 | 0.2% | Apr 28, 2025 | The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: C... |
| CVE-2015-2079 | HIGH | 8.8 | 1.0% | Apr 28, 2025 | Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the t... |
| CVE-2015-20111 | CRITICAL | 9.8 | 1.3% | Nov 18, 2024 | miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values... |
| CVE-2015-10132 | LOW | 3.5 | 0.5% | Apr 21, 2024 | A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This... |
| CVE-2015-10131 | LOW | 3.5 | 0.5% | Mar 31, 2024 | A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected b... |
| CVE-2015-10123 | HIGH | 8.8 | 0.6% | Mar 13, 2024 | An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user... |
| CVE-2015-10130 | MEDIUM | 4.3 | 0.2% | Mar 13, 2024 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1... |
| CVE-2015-10129 | MEDIUM | 5.9 | 0.6% | Feb 4, 2024 | A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some un... |
| CVE-2015-10128 | MEDIUM | 6.1 | 0.5% | Jan 2, 2024 | A vulnerability was found in rt-prettyphoto Plugin up to 1.2 on WordPress and classified as problematic. Affected by thi... |
| CVE-2015-10127 | MEDIUM | 6.1 | 0.5% | Dec 26, 2023 | A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPress and classified as problematic. Affected by this... |
| CVE-2015-8314 | HIGH | 7.5 | 0.6% | Dec 12, 2023 | The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain... |
| CVE-2015-2179 | MEDIUM | 5.5 | 0.4% | Dec 12, 2023 | The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and ... |
| CVE-2015-2968 | MEDIUM | 5.9 | 0.2% | Oct 31, 2023 | LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since ... |
| CVE-2015-0897 | MEDIUM | 5.9 | 0.2% | Oct 31, 2023 | LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now