Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2015-9364

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

iThemes Exchange for WordPress是使用在WordPress内容管理系统中的一个用于创建电子商务网站的插件。2Checkout Add-on是其中的一个2Checkout支付网关插件。 iThemes Exchange for WordPress中的2Checkout Add-on存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

AI Predicted 6.1 Difficulty: Easy EPSS 1.25% · P67
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-9364

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
2Checkout Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress iThemes Exchange 2Checkout Add-on 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iThemes Exchange for WordPress是使用在WordPress内容管理系统中的一个用于创建电子商务网站的插件。2Checkout Add-on是其中的一个2Checkout支付网关插件。 iThemes Exchange for WordPress中的2Checkout Add-on存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-9364

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-9364

请登录查看更多情报信息。

Security Blog Posts for CVE-2015-9364 (1)

Other References for CVE-2015-9364 (1)

Same Patch Batch · n/a · 2019-08-28 · 60 CVEs total

CVE-2015-9366 WordPress iThemes Exchange Custom URL Tracking Add-on 跨站脚本漏洞
CVE-2015-9353 WordPress gigpress插件SQL注入漏洞
CVE-2011-5329 WordPress redirection插件跨站脚本漏洞
CVE-2012-6718 WordPress sharebar插件跨站脚本漏洞
CVE-2012-6719 WordPress sharebar插件SQL注入漏洞
CVE-2012-6717 WordPress redirection插件跨站脚本漏洞
CVE-2015-9361 WordPress Related Posts插件跨站脚本漏洞
CVE-2015-9362 WordPress Post Connector插件跨站脚本漏洞
CVE-2015-9363 WordPress iThemes Exchange插件跨站脚本漏洞
CVE-2015-9365 WordPress iThemes Exchange Authorize.net Add-on 跨站脚本漏洞
CVE-2015-9360 WordPress updraftplus插件跨站脚本漏洞
CVE-2015-9367 WordPress iThemes Exchange Easy Canadian Sales Taxes Add-on 跨站脚本漏洞
CVE-2015-9368 WordPress iThemes Exchange Easy EU Value Added (VAT) Taxes Add-on 跨站脚本漏洞
CVE-2015-9369 WordPress iThemes Exchange Easy US Sales Taxes Add-on插件跨站脚本漏洞
CVE-2015-9370 WordPress iThemes Exchange Invoices Add-on 跨站脚本漏洞
CVE-2015-9371 WordPress iThemes Exchange Manual Purchases Add-on插件跨站脚本漏洞
CVE-2015-9372 WordPress iThemes Exchange Membership Add-on 跨站脚本漏洞
CVE-2015-9373 WordPress iThemes Exchange PayPal Pro Add-on插件跨站脚本漏洞
CVE-2015-9374 WordPress iThemes Exchange Stripe Add-on插件跨站脚本漏洞
CVE-2015-9375 WordPress iThemes Exchange Table Rate Shipping Add-on插件跨站脚本漏洞

Showing top 20 of 60 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-9364

No comments yet

Leave a comment