WordPress Plugin Vulnerabilities

WordPress Mobile Pack <= 2.1.2 - Information Disclosure

Description

The WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps WordPress plugin was affected by an Information Disclosure security vulnerability.

Affects Plugins

Plugin icon
wordpress-mobile-pack
Fixed in 2.1.3

References

CVE
CVE-2015-9269
URL
auxiliary/scanner/http/wp_mobile_pack_info_disclosure
URL
https://packetstormsecurity.com/files/#132750/
URL
https://seclists.org/fulldisclosure/2015/Jul/97
URL
https://github.com/espreto/wpsploit/blob/master/modules/auxiliary/scanner/http/wp_mobile_pack_info_disclosure.rb

Miscellaneous

Submitter
pvdl
Verified
Yes
WPVDB ID
406e8563-02ff-4171-bea9-e574d898a53a

Timeline

Publicly Published
2015-07-18 (about 10 years ago)
Added
2015-07-20 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2022-05-18
Title
HC Custom WP-Admin URL <= 1.4 - Unauthenticated Secret URL Disclosure
Published
2014-08-01
Title
WordPress 2.0 - 3.0.1 wp-includes/comment.php Bypass Spam Restrictions
Published
2015-05-02
Title
Slideshow 2.2.8-2.2.21 - Option Value Disclosure
Published
2023-07-27
Title
Change WP Admin < 1.1.4 - Secret Login Page Disclosure
Published
2021-01-20
Title
123ContactForm for WordPress <= 1.5.6 - Validation Bypass via Plugin Verification