CVE-2015-9451
Critical
Description
The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSizmic Plugmatter Optin Feature Box
PublishedOct 7, 2019
First seenOct 7, 2019
How to fix
Update
- sizmic plugmatter_optin_feature_box2.0.14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sizmic plugmatter_optin_feature_box | v < 2.0.14 | 2.0.14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.