blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2015-10102

MEDIUM 6.1 CVSS 3.1
Published
April 17, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
cna@vuldb.com
Weakness
CWE-601
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to open redirect. The attack may be launched remotely. Upgrading to version 1.8 is able to address this issue. The patch is identified as 2aaecd4e0c7c6c1dc4e6a593163d5f7aa0fa5d5b. It is recommended to upgrade the affected component. VDB-226118 is the identifier assigned to this vulnerability.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • n/a Freshdesk Plugin — Version 1.7
  • freshworks freshdesk — Version 1.7

References

  • github.com https://github.com/wp-plugins/freshdesk-support/commit/2aaecd4e0c7c6c1dc4e6a593163d5f7aa0fa5d5b Patch
  • vuldb.com https://vuldb.com/?ctiid.226118 Permissions Required, Third Party Advisory
  • vuldb.com https://vuldb.com/?id.226118 Third Party Advisory
  • nvd.nist.gov Official NVD record