CVE-2015-3634

Description

The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for Wordpress allows remote attackers to read arbitrary Wordpress option values.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.openwall.com/lists/oss-security/2015/05/02/12
• http://www.securityfocus.com/bid/74453
• https://github.com/Boonstra/Slideshow/commit/cac505e593cbe70a4d8af5b639f5385d4cc7aa04
• https://wordpress.org/plugins/slideshow-jquery-image-gallery/#developers
• http://www.openwall.com/lists/oss-security/2015/05/02/12
• http://www.securityfocus.com/bid/74453
• https://github.com/Boonstra/Slideshow/commit/cac505e593cbe70a4d8af5b639f5385d4cc7aa04
• https://wordpress.org/plugins/slideshow-jquery-image-gallery/#developers

CWEs

CWE-200

💬 Discuss CVE-2015-3634 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.