Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2019-15319
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
0
Attacker Value
Unknown
CVE-2019-15320
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
0
Attacker Value
Unknown
CVE-2019-15321
Disclosure Date: August 22, 2019 (last updated November 27, 2024)
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
0
Attacker Value
Unknown
CVE-2016-10895
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
0
Attacker Value
Unknown
CVE-2015-9320
Disclosure Date: August 20, 2019 (last updated November 27, 2024)
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
0
