CVE-2015-3634 Slideshow 2.2.8 - 2.2.21 - Information Exposure
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| slideshow project slideshow | = 2.2.8 | No fix listed |
| slideshow project slideshow | = 2.2.9 | No fix listed |
| slideshow project slideshow | = 2.2.10 | No fix listed |
| slideshow project slideshow | = 2.2.11 | No fix listed |
| slideshow project slideshow | = 2.2.12 | No fix listed |
| slideshow project slideshow | = 2.2.13 | No fix listed |
| slideshow project slideshow | = 2.2.14 | No fix listed |
| slideshow project slideshow | = 2.2.15 | No fix listed |
| slideshow project slideshow | = 2.2.16 | No fix listed |
| slideshow project slideshow | = 2.2.17 | No fix listed |
| slideshow project slideshow | = 2.2.18 | No fix listed |
| slideshow project slideshow | = 2.2.19 | No fix listed |
| slideshow project slideshow | = 2.2.20 | No fix listed |
| slideshow project slideshow | = 2.2.21 | No fix listed |
| wordpress slideshow-jquery-image-gallery(WordPress) | >= 2.2.8, < 2.2.22 | 2.2.22 |
References
- [oss-security] 20150502 Re: CVE request / Advisory: Slideshow (Wordpress plugin) - Wordpress option value disclosure mailing-list patch third-party-advisory
- 74453 third-party-advisory vdb-entry
- github.com patch third-party-advisory
- wordpress.org release-notes third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org