CVE-2015-9455

HIGH · CVSS 8.1 EPSS 0.71%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-07 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-9455

Severity

HIGH

CVSS

8.1

EPSS

0.71%

WordPress

Original Filing — NVD Description

The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.