Vulnerability Details CVE-2015-9331
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2015-9331
-
cpe:2.3:a:soflyy:wp_all_import:2.12
-
cpe:2.3:a:soflyy:wp_all_import:2.13
-
cpe:2.3:a:soflyy:wp_all_import:2.14
-
cpe:2.3:a:soflyy:wp_all_import:3.0
-
cpe:2.3:a:soflyy:wp_all_import:3.0.2
-
cpe:2.3:a:soflyy:wp_all_import:3.0.4
-
cpe:2.3:a:soflyy:wp_all_import:3.1.0
-
cpe:2.3:a:soflyy:wp_all_import:3.1.1
-
cpe:2.3:a:soflyy:wp_all_import:3.1.2
-
cpe:2.3:a:soflyy:wp_all_import:3.1.3
-
cpe:2.3:a:soflyy:wp_all_import:3.1.4
-
cpe:2.3:a:soflyy:wp_all_import:3.1.5
-
cpe:2.3:a:soflyy:wp_all_import:3.2.0
-
cpe:2.3:a:soflyy:wp_all_import:3.2.1
-
cpe:2.3:a:soflyy:wp_all_import:3.2.2
-
cpe:2.3:a:soflyy:wp_all_import:3.2.3