cve/2015/CVE-2015-9395.md

CVE-2015-9395

Description

The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.

POC

Reference

• https://seclists.org/bugtraq/2015/Dec/12
• https://wpvulndb.com/vulnerabilities/8349/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon