CVE-2015-6523

MEDIUM 6.8CVE-2015-6523 · Published 19/08/2015 · updated 17/06/2026

In short

CVE-2015-6523 is a MEDIUM (CVSS 6.8) vulnerability affecting portfolio (portfolio project).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
portfolio portfolio_project	`≤ 1.0`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php.

References

seclists.org/fulldisclosure/2015/Jul/104 · Exploit
plugins.trac.wordpress.org/changeset/1175403/portfolio-by-lisa-westlund
wpvulndb.com/vulnerabilities/8108

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free