EDB-36414
PoCWordPress Plugin WPML 3.1.9 - Multiple Vulnerabilities
view exploit source exploit_dbtype webappsauthor Jouko Pynnonenpublished 2015-03-16catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-2791US | medium6.4 | Exploit | ||
The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to sitepress-multil… | ||||
| CVE-2015-2315US | medium4.3 | Exploit | ||
Cross-site scripting (XSS) vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the target parameter in a… | ||||
| CVE-2015-2314US | high7.5 | Exploit | ||
SQL injection vulnerability in the WPML plugin before 3.1.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the lang parameter in the HTTP Referer heade… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan