Medium severity4.3NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2015-10112

Description

A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. Affected is the function admin_screen_logic of the file wooframework-branding.php. The manipulation of the argument url leads to open redirect. It is possible to launch the attack remotely. Upgrading to version 1.0.2 is able to address this issue. The name of the patch is f12fccd7b5eaf66442346f748c901ef504742f78. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230652.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wooframework Brandinginferred2 versions
<=1.0.1+ 1 more
- (no CPE)range: <=1.0.1
- (no CPE)range: <=1.0.1
Package: https://wordpress.org/plugins/wooframework-branding
WooCommerce/Wooframework Branding
cpe:2.3:a:woocommerce:wooframework_branding:*:*:*:*:*:wordpress:*:*
Range: <=1.0.1

Patches

Vulnerability mechanics

References

github.com/wp-plugins/wooframework-branding/commit/f12fccd7b5eaf66442346f748c901ef504742f78nvdPatch
vuldb.comnvdPermissions RequiredThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000