← All advisories

Medium severity6.1NVD Advisory· Published Aug 28, 2019· Updated Jun 17, 2026

CVE-2015-9356

CVE-2015-9356

Description

The wp-vipergb plugin before 1.3.16 for WordPress has XSS via add_query_arg() and remove_query_arg(), a different issue than CVE-2014-9460.

Affected products

2

WordPress/wp-vipergb plugindescription
WordPress/Wp Vipergbllm-fuzzy
Range: <1.3.16
Package: https://wordpress.org/plugins/wp-vipergb

Patches

Vulnerability mechanics

References

2

make.wordpress.org/plugins/2015/04/20/fixing-add_query_arg-and-remove_query_arg-usage/nvdThird Party Advisory
wordpress.org/plugins/wp-vipergb/nvdRelease NotesThird Party Advisory

News mentions

0

No linked articles in our index yet.