CVE-2015-9393

Description

References

• wordpress.org/plugins/users-ultra · Product
• wpvulndb.com/vulnerabilities/8350 · Third Party Advisory

users ultra membership의 다른 취약점

• CVE-2015-9402높음 8.8The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
• CVE-2015-9395높음 8.8The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
• CVE-2015-9394높음 8.8The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
• CVE-2015-9392보통 5.4The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_name parameter.