CVE-2015-4070

MEDIUM 6.1 CVSS 3.0

Published: May 17, 2017
Last modified: June 17, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-601
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Affected products and versions

n/a n/a — Versions not specified
wow_new_media wow_moodboard_lite — Version 1.1.1

References

www.securityfocus.com http://www.securityfocus.com/bid/75047 Third Party Advisory, VDB Entry
www.vapid.dhs.org http://www.vapid.dhs.org/advisory.php?v=120 Third Party Advisory
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References