CVE-2015-1000013

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Oct 6, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-100014.3The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputtingCVE-2015-100025.5A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressiCVE-2015-100034.3A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the componCVE-2015-100047.5Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low CVE-2015-100057.5A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/cCVE-2015-100066.1A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionaCVE-2015-100076.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some uCVE-2015-100089.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown paCVE-2015-100099.8A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file aCVE-2015-100110.0Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary cCVE-2015-100106.1A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file rCVE-2015-100119.8A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoi
CVE-2015-1000013: High severity, CVSS 7.8 | Vulnix