CVE-2015-9395 Users Ultra Membership Plugin <= 1.5.63 - Authenticated Blind SQL Injection
HighCVSS 8.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| usersultra users ultra membership | < 1.5.64 | 1.5.64 |
| wordpress users-ultra(WordPress) | < 1.5.64 | 1.5.64 |
References
- seclists.org mailing-list third-party-advisory
- wordpress.org product release-notes
- wpvulndb.com third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org