CVE-2015-10132 - CVE House
Back to Database
Status published Low CVE-2015-10132

Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scripting

Vulnerability Description

A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of the file spreadplugin.php. The manipulation of the argument Spreadplugin leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 3.8.6.6 is able to address this issue. The name of the patch is a9b9afc641854698e80aa5dd9ababfc8e0e57d69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-261676.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-10132

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • VulDB GitHub Commit Analyzer

Affected Vendor

Thimo Grauerholz

View all reports →

Affected Software

WP-Spreadplugin
Vulnerable Versions:
3.8.6.0, 3.8.6.1

Timeline

Official Publish: April 21st, 2024
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Weaknesses (CWE)