2015 CVE Vulnerabilities

8,787 CVEs published in 2015.

CVE IDSeverityCVSSDescription
CVE-2015-9325——The visitors-online plugin before 0.4 for WordPress has SQL injection.
CVE-2015-9310——The all-in-one-wp-security-and-firewall plugin before 3.9.1 for WordPress has multiple SQL injection issues.
CVE-2015-9309HIGH8.8The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit category feature.
CVE-2015-9308HIGH8.8The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit map feature.
CVE-2015-9307HIGH8.8The wp-google-map-plugin plugin before 2.3.10 for WordPress has CSRF in the add/edit location feature.
CVE-2015-9316——The wp-fastest-cache plugin before 0.8.4.9 for WordPress has SQL injection in wp-admin/admin-ajax.php?action=wpfc_wppoll...
CVE-2015-9315——The newstatpress plugin before 1.0.1 for WordPress has SQL injection.
CVE-2015-9314——The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header.
CVE-2015-9313——The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element.
CVE-2015-9312——The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.
CVE-2015-9311——The newstatpress plugin before 1.0.6 for WordPress has reflected XSS.
CVE-2015-9302MEDIUM6.1The simple-fields plugin before 1.4.11 for WordPress has XSS.
CVE-2015-9301——The liveforms plugin before 3.2.0 for WordPress has SQL injection.
CVE-2015-9300——The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues.
CVE-2015-9299——The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS.
CVE-2015-9298CRITICAL9.8The events-manager plugin before 5.6 for WordPress has code injection.
CVE-2015-9297MEDIUM6.1The events-manager plugin before 5.6 for WordPress has XSS.
CVE-2015-9296——The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
CVE-2015-9295——The contact-form-plugin plugin before 3.96 for WordPress has XSS.
CVE-2015-9294——The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg ...
CVE-2015-9293——The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature.
CVE-2015-9304MEDIUM6.1The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input.
CVE-2015-9303——The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS.
CVE-2015-9306——The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS.
CVE-2015-9305——The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg()...

Check if your code is affected by 2015 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now