Medium severity4.3NVD Advisory· Published Nov 1, 2021· Updated Jun 17, 2026
CVE-2015-10001
CVE-2015-10001
Description
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/WP-Statsdescription
Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2015/06/17/6nvdExploitMailing ListThird Party Advisory
- wpscan.com/vulnerability/f5c3dfea-7203-4a98-88ff-aa6a24d03734nvdThird Party Advisory
News mentions
0No linked articles in our index yet.