2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9392 | MEDIUM | 5.4 | 1.2% | Sep 20, 2019 | The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter. |
| CVE-2015-9391 | MEDIUM | 6.1 | 1.3% | Sep 20, 2019 | The yawpp plugin through 1.2.2 for WordPress has XSS via the field1 parameter. |
| CVE-2015-9390 | MEDIUM | 4.3 | 0.9% | Sep 20, 2019 | The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are ... |
| CVE-2015-9389 | MEDIUM | 5.4 | 0.8% | Sep 20, 2019 | The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name. |
| CVE-2015-9388 | MEDIUM | 6.5 | 0.7% | Sep 20, 2019 | The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS. |
| CVE-2015-9387 | MEDIUM | 6.5 | 0.7% | Sep 20, 2019 | The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF. |
| CVE-2015-9386 | MEDIUM | 6.1 | 1.0% | Sep 20, 2019 | The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation. |
| CVE-2015-9385 | MEDIUM | 6.1 | 1.0% | Sep 20, 2019 | The quotes-and-tips plugin before 1.20 for WordPress has XSS. |
| CVE-2015-9384 | MEDIUM | 6.1 | 1.0% | Sep 20, 2019 | The relevant plugin before 1.0.8 for WordPress has XSS. |
| CVE-2015-9383 | MEDIUM | 6.5 | 2.3% | Sep 3, 2019 | FreeType before 2.6.2 has a heap-based buffer over-read in tt_cmap14_validate in sfnt/ttcmap.c. |
| CVE-2015-9382 | — | — | 1.7% | Sep 3, 2019 | FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because ps_parser_skip_PS_token is mishan... |
| CVE-2015-9381 | — | — | 1.9% | Sep 3, 2019 | FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. |
| CVE-2015-9380 | — | — | 0.8% | Aug 30, 2019 | The photo-gallery plugin before 1.2.42 for WordPress has CSRF. |
| CVE-2015-9359 | — | — | 0.9% | Aug 28, 2019 | The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9379 | — | — | 0.9% | Aug 28, 2019 | iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9378 | — | — | 0.9% | Aug 28, 2019 | iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9377 | — | — | 0.9% | Aug 28, 2019 | iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9376 | — | — | 0.9% | Aug 28, 2019 | iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9375 | — | — | 0.9% | Aug 28, 2019 | Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_... |
| CVE-2015-9374 | — | — | 0.9% | Aug 28, 2019 | Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9373 | — | — | 0.9% | Aug 28, 2019 | PayPal Pro Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9372 | — | — | 0.9% | Aug 28, 2019 | Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9371 | — | — | 0.9% | Aug 28, 2019 | Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg... |
| CVE-2015-9370 | — | — | 0.9% | Aug 28, 2019 | Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg(). |
| CVE-2015-9369 | — | — | 0.9% | Aug 28, 2019 | Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now