CVE-2015-9395

The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2019-09-20

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Users Ultra Membership (Usersultra)

References

• https://seclists.org/bugtraq/2015/Dec/12
• https://wordpress.org/plugins/users-ultra/#developers
• https://wpvulndb.com/vulnerabilities/8349/