blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2015-10078

MEDIUM 6.1 CVSS 3.1
Published
February 12, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
cna@vuldb.com
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function send_welcome_email_url of the file resend-welcome-email.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0.2 is able to address this issue. The identifier of the patch is b14c1f66d307783f0ae74f88088a85999107695c. It is recommended to upgrade the affected component. The identifier VDB-220637 was assigned to this vulnerability.

Affected products and versions

  • atwellpub Resend Welcome Email Plugin — Version 1.0.1
  • resend_welcome_email_project resend_welcome_email — Version 1.0.1

References

  • github.com https://github.com/atwellpub/resend-welcome-email/commit/b14c1f66d307783f0ae74f88088a85999107695c Patch
  • github.com https://github.com/atwellpub/resend-welcome-email/pull/1 Patch
  • vuldb.com https://vuldb.com/?ctiid.220637 Permissions Required, Third Party Advisory
  • vuldb.com https://vuldb.com/?id.220637 Third Party Advisory
  • nvd.nist.gov Official NVD record