CVE-2015-9451

CRITICAL · CVSS 9.8 EPSS 2.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-07 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-9451

Severity

CRITICAL

CVSS

9.8

EPSS

2.37%

WordPress

Original Filing — NVD Description

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.