WordPress Plugin Vulnerabilities

Private Only <= 3.5.1 - CSRF & XSS

Description

The private-only WordPress plugin was affected by a CSRF & XSS security vulnerability.

Affects Plugins

Plugin icon
private-only
No known fix

References

CVE
CVE-2015-5483
URL
https://packetstormsecurity.com/files/#133349/
URL
https://advisories.dxw.com/advisories/csrfxss-vulnerability-in-private-only-could-allow-an-attacker-to-do-almost-anything-an-admin-user-can/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
232d2e86-93e3-4dfb-8fcf-5bb01aa4a2db

Timeline

Publicly Published
2015-08-26 (about 10 years ago)
Added
2015-08-26 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2019-05-13
Title
Ultimate Member < 2.0.46 - Multiple Vulnerabilities
Published
2016-09-27
Title
Google Document Embedder < 2.6.2 - CSRF & XSS
Published
2019-07-01
Title
Newsletter Lite < 4.6.19 - Multiple Issues
Published
2018-10-09
Title
WP Fastest Cache <= 0.8.8.5 - CSRF and multiple XSS
Published
2020-04-23
Title
MapPress Maps Pro < 2.53.9 - Remote Code Execution (RCE) due to Incorrect Access Control in AJAX Actions