CVE-2015-2314

概要

参考情報

• klikki.fi/adv/wpml.html · Exploit
• packetstormsecurity.com/files/130810/WordPress-WPML-XSS-Deletion-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Mar/71 · Exploit
• wpml.org/2015/03/wpml-security-update-bug-and-fix · Vendor Advisory
• osvdb.org/119541
• securityfocus.com/archive/1/534862/100/0/threaded

wpml のその他の脆弱性

• CVE-2025-3488中 5.4The WPML plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpml_language_switcher shortcode in versions 3.6…
• CVE-2024-6386高 8.8The WPML plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.6.12 via Twig Server-Side Templ…
• CVE-2022-38974中 4.3Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher us…
• CVE-2022-45072中 4.3Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.
• CVE-2022-45071高 8.8Cross-Site Request Forgery (CSRF) vulnerability in WPML Multilingual CMS premium plugin <= 4.5.13 on WordPress.