CVE-2015-9396

MEDIUM 6.1CVE-2015-9396 · Published 20/09/2019 · updated 17/06/2026

In short

CVE-2015-9396 is a MEDIUM (CVSS 6.1) vulnerability affecting auto thickbox plus (attosoft).
Chance of exploitation in the next 30 days (EPSS): 0.98%, higher than 62.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
auto thickbox plus attosoft	`≤ 1.9`	No fix yet

The auto-thickbox-plus plugin through 1.9 for WordPress has wp-content/plugins/auto-thickbox-plus/download.min.php?file= XSS.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.