CVE-2015-10127
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2015-10127 is a cross-site scripting vulnerability affecting the PlusCaptcha Plugin up to version 2.0.6 on WordPress. The exact functionality that is impacted by this issue remains unknown. An attacker can exploit this weakness to inject malicious code, potentially leading to serious security consequences. This vulnerability can be exploited remotely, making it a significant threat. To mitigate this issue, it is recommended to upgrade the plugin to version 2.0.14 and apply the patch with the identifier 1274afc635170daafd383306487b6bb8a01f78ecd. The VDB-248954 identifier has been assigned to this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.