CVE-2015-9442

The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin

published September 26, 2019

CVSS
—
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.4th percentile
Published
2019-09-26T03:51Z
EPSS history
Timeline
  • 26 SEP 03:51Z
    The avenirsoft-directdownload plugin 1.0 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=avenir_plugin
    cvelistv5