CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9426

The manual-image-crop plugin before 1.11 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=mic_editor_window postId parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.5%

CVSS Severity

CVSS v3 Score 4.6

CVSS v2 Score 3.5

References

Products affected by CVE-2015-9426

Manual Image Crop Project » Manual Image Crop » Version: N/A

cpe:2.3:a:manual_image_crop_project:manual_image_crop:-
Manual Image Crop Project » Manual Image Crop » Version: 1.0

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.0
Manual Image Crop Project » Manual Image Crop » Version: 1.01

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.01
Manual Image Crop Project » Manual Image Crop » Version: 1.02

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.02
Manual Image Crop Project » Manual Image Crop » Version: 1.03

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.03
Manual Image Crop Project » Manual Image Crop » Version: 1.04

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.04
Manual Image Crop Project » Manual Image Crop » Version: 1.05

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.05
Manual Image Crop Project » Manual Image Crop » Version: 1.06

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.06
Manual Image Crop Project » Manual Image Crop » Version: 1.07

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.07
Manual Image Crop Project » Manual Image Crop » Version: 1.08

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.08
Manual Image Crop Project » Manual Image Crop » Version: 1.09

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.09
Manual Image Crop Project » Manual Image Crop » Version: 1.10

cpe:2.3:a:manual_image_crop_project:manual_image_crop:1.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-9426

Products

Pricing

Contact Us