Medium severity6.1NVD Advisory· Published Aug 28, 2019· Updated Jun 17, 2026
CVE-2015-9363
CVE-2015-9363
Description
iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/iThemes Exchangedescription
- Range: <1.12.0
Patches
Vulnerability mechanics
References
2- ithemes.com/coordinated-wordpress-plugin-security-update/nvdPatchVendor Advisory
- blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.