← All advisories

High severity8.8NVD Advisory· Published Oct 22, 2019· Updated Jun 17, 2026

CVE-2015-9497

CVE-2015-9497

Description

The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/ad-inserter plugindescription
AD Inserter Project/AD Inserter
cpe:2.3:a:ad_inserter_project:ad_inserter:*:*:*:*:*:wordpress:*:*
Range: <1.5.3
WordPress/AD Inserterllm-fuzzy
Range: <1.5.3
Package: https://wordpress.org/plugins/ad-inserter

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/131798/nvdExploitThird Party AdvisoryVDB Entry
wpvulndb.com/vulnerabilities/7974nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.