CVE-2015-9392

概要

参考情報

• seclists.org/bugtraq/2015/Dec/13 · Exploit
• wordpress.org/plugins/users-ultra · Product
• wpvulndb.com/vulnerabilities/8350 · Third Party Advisory

users ultra membership のその他の脆弱性

• CVE-2015-9402高 8.8The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
• CVE-2015-9395高 8.8The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
• CVE-2015-9394高 8.8The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
• CVE-2015-9393中 5.4The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.