CVE-2015-9320

Description

References

• wordpress.org/plugins/option-tree · Release Notes
• wpvulndb.com/vulnerabilities/9769 · Third Party Advisory

Autres vulnérabilités de optiontree

• CVE-2019-15321CRITIQUE 9.8The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
• CVE-2019-15320CRITIQUE 9.8The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
• CVE-2019-15319CRITIQUE 9.8The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
• CVE-2016-10895MOYENNE 6.1The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.