CVE-2015-4127
Published · Updated
38Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 7.4%
from disclosure to weapon0 days
Published on NVDMay 28
1st PoCMay 26
exploitation probability
7.4%top 6% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/.
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/37112unverifiedcve_referencepacketstormsecurity.com/files/132034/WordPress-Church-Admin-0.800-Cross-Site-Scripting.htmlunverifiedcve_referencewww.exploit-db.com/exploits/37112/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.