CVE-2015-10104

MITTEL 6.1CVE-2015-10104 · Published 30/04/2023 · updated 17/06/2026

Kurz gesagt

CVE-2015-10104 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in icons for features (woocommerce).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.55%, höher als bei 46.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
icons for features woocommerce	`= 1.0.0`	No fix yet

Description

A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the file classes/class-icons-for-features-admin.php. The manipulation of the argument redirect_url leads to open redirect. The attack may be launched remotely. Upgrading to version 1.0.1 is able to address this issue. The name of the patch is 63124c021ae24b68e56872530df26eb4268ad633. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-227756.

References

wp-plugins/icons-for-features commit 63124c0 · Patch
wp-plugins/icons-for-features release 1.0.1 · Release Notes
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free