CVE-2015-9484 (accio_one_page_parallax_responsive_theme)

The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

View Full Alert

Related Posts

  • CVE-2015-9475

    The Pont theme 1.5 for WordPress has insufficient restrictions on option updates. View Full Alert

  • CVE-2015-9474

    The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates. View Full Alert

  • CVE-2015-9456

    The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter. View Full Alert