VDB
CVE-2015-10108
CVE-2015-10108
PUBLISHED
CVSS 4.300000190734863 MEDIUM
A vulnerability was found in meitar Inline Google Spreadsheet Viewer Plugin up to 0.9.6 on WordPress and classified as problematic. Affected by this issue is the function displayShortcode of the file inline-gdocs-viewer.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 0.9.6.1 is able to address this issue. The patch is identified as 2a8057df8ca30adc859cecbe5cad21ac28c5b747. It is recommended to upgrade the affected component. VDB-230234 is the identifier assigned to this vulnerability.
EPSS 0.44% · 37.9th percentile
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.44%
37.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| meitar | Inline Google Spreadsheet Viewer Plugin | 0.9.0, 0.9.1, 0.9.2 |
| inline_google_spreadsheet_viewer_project | inline_google_spreadsheet_viewer | 0 |
Timeline
- May 31, 2023 CVE Published
- Jun 1, 2023 EPSS Score
- Jul 7, 2023 EPSS Score
- Aug 13, 2023 EPSS Score
- Sep 18, 2023 EPSS Score
- Oct 25, 2023 EPSS Score
- Nov 30, 2023 EPSS Score
- Jan 5, 2024 EPSS Score
- Feb 11, 2024 EPSS Score
- Apr 23, 2024 EPSS Score
- May 30, 2024 EPSS Score
- Jul 5, 2024 EPSS Score
References
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/releases/tag/0.9.6.1 patch
- https://nvd.nist.gov/vuln/detail/CVE-2015-10108 advisory
- https://vuldb.com/?ctiid.230234 url
- https://vuldb.com/?id.230234 url
- https://github.com/wp-plugins/inline-google-spreadsheet-viewer/commit/2a8057df8ca30adc859cecbe5cad21ac28c5b747 patch