CVE-2015-10095

MOYENNE 6.1CVE-2015-10095 · Published 06/03/2023 · updated 17/06/2026

En bref

CVE-2015-10095 est une vulnérabilité MOYENNE (CVSS 6.1) touchant woo-popup (woo-popup project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.61%, plus élevée que 49.3% des vulnérabilités.
Correctif : mettre à jour vers 1.3.0 ou plus récent.

Package	Affected versions	Patched versions
woo-popup woo-popup_project	`< 1.3.0`	`1.3.0`

Description

A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2 on WordPress. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.3.0 is able to address this issue. The patch is named 7c76ac78f3e16015991b612ff4fa616af4ce9292. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222327.

References

wp-plugins/woo-popup commit 7c76ac7 · Patch
wp-plugins/woo-popup release 1.3.0 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free