2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9484 | HIGH | 7.5 | 3.1% | Oct 11, 2019 | The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obt... |
| CVE-2015-9483 | HIGH | 7.5 | 3.1% | Oct 11, 2019 | The ThemeMakers Invento Responsive Gallery/Architecture Template component through 2015-05-15 for WordPress allows remot... |
| CVE-2015-9482 | HIGH | 7.5 | 3.1% | Oct 11, 2019 | The ThemeMakers Car Dealer / Auto Dealer Responsive theme through 2015-05-15 for WordPress allows remote attackers to ob... |
| CVE-2015-9481 | HIGH | 7.5 | 3.1% | Oct 11, 2019 | The ThemeMakers Diplomat | Political theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive ... |
| CVE-2015-9480 | HIGH | 7.5 | 12.6% | Oct 10, 2019 | The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. |
| CVE-2015-9479 | CRITICAL | 9.8 | 2.8% | Oct 10, 2019 | The ACF-Frontend-Display plugin through 2015-07-03 for WordPress has arbitrary file upload via an action=upload request ... |
| CVE-2015-9478 | MEDIUM | 6.1 | 0.8% | Oct 10, 2019 | prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS. |
| CVE-2015-9477 | HIGH | 8.8 | 1.4% | Oct 10, 2019 | The Vernissage theme 1.2.8 for WordPress has insufficient restrictions on option updates. |
| CVE-2015-9476 | HIGH | 8.8 | 1.4% | Oct 10, 2019 | The Teardrop theme 1.8.1 for WordPress has insufficient restrictions on option updates. |
| CVE-2015-9475 | HIGH | 8.8 | 1.5% | Oct 10, 2019 | The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. |
| CVE-2015-9474 | HIGH | 8.8 | 1.5% | Oct 10, 2019 | The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. |
| CVE-2015-9473 | HIGH | 7.5 | 3.7% | Oct 10, 2019 | The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo... |
| CVE-2015-9472 | MEDIUM | 6.1 | 1.3% | Oct 10, 2019 | The incoming-links plugin before 0.9.10b for WordPress has referrers.php XSS via the Referer HTTP header. |
| CVE-2015-9471 | CRITICAL | 9.8 | 4.0% | Oct 10, 2019 | The dzs-zoomsounds plugin through 2.0 for WordPress has admin/upload.php arbitrary file upload. |
| CVE-2015-9470 | HIGH | 7.5 | 4.1% | Oct 10, 2019 | The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. |
| CVE-2015-9469 | MEDIUM | 4.8 | 0.9% | Oct 10, 2019 | The content-grabber plugin 1.0 for WordPress has XSS via obj_field_name or obj_field_id. |
| CVE-2015-9468 | MEDIUM | 6.1 | 1.0% | Oct 10, 2019 | The broken-link-manager plugin 0.4.5 for WordPress has XSS via the page parameter in a delURL action. |
| CVE-2015-9467 | CRITICAL | 9.8 | 2.4% | Oct 10, 2019 | The broken-link-manager plugin before 0.5.0 for WordPress has wpslDelURL or wpslEditURL SQL injection via the url parame... |
| CVE-2015-9466 | CRITICAL | 9.8 | 2.4% | Oct 10, 2019 | The wti-like-post plugin before 1.4.3 for WordPress has WtiLikePostProcessVote SQL injection via the HTTP_CLIENT_IP, HTT... |
| CVE-2015-9465 | HIGH | 8.8 | 1.9% | Oct 10, 2019 | The yet-another-stars-rating plugin before 0.9.1 for WordPress has yasr_get_multi_set_values_and_field SQL injection via... |
| CVE-2015-9463 | HIGH | 7.5 | 4.1% | Oct 10, 2019 | The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/u... |
| CVE-2015-9464 | HIGH | 7.5 | 3.7% | Oct 10, 2019 | The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets... |
| CVE-2015-9462 | HIGH | 7.2 | 1.9% | Oct 10, 2019 | The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_category_page SQL injection via the cat... |
| CVE-2015-9461 | HIGH | 7.2 | 1.9% | Oct 10, 2019 | The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via t... |
| CVE-2015-9460 | HIGH | 8.8 | 1.9% | Oct 10, 2019 | The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now