CVE-2015-9422

MEDIUM 6.5CVE-2015-9422 · Published 26/09/2019 · updated 17/06/2026

In short

CVE-2015-9422 is a MEDIUM (CVSS 6.5) vulnerability affecting plugnedit (simplysymphony).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.7% of all vulnerabilities.
Fix: update to 6.2.0 or later.

Package	Affected versions	Patched versions
plugnedit simplysymphony	`< 6.2.0`	`6.2.0`

Description

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, PlugneditEditorMargin, or plugneditcontent parameters.

References

cinu.pl/research/wp-plugins/mail_b5405e735cb605b2fd1a300bb8be4860.html · Exploit
wordpress.org/plugins/plugnedit · Product
wpvulndb.com/vulnerabilities/8331 · Exploit

More vulnerabilities in plugnedit

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free