Vulnerability Details CVE-2015-9398
The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.9%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html
- https://wordpress.org/plugins/gocodes/#developers
- https://wpvulndb.com/vulnerabilities/8322
- http://cinu.pl/research/wp-plugins/mail_7ab7e224de198b2eda11dcb072d6bc8d.html
- https://wordpress.org/plugins/gocodes/#developers
- https://wpvulndb.com/vulnerabilities/8322
Products affected by CVE-2015-9398
-
cpe:2.3:a:webmaster-source:gocodes:-
-
cpe:2.3:a:webmaster-source:gocodes:1.3.5