CVE-2015-6668
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-6668
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress Job Manager插件安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。Job Manager是其中的一个任务管理器插件。 WordPress Job Manager插件0.7.25之前的版本中存在安全漏洞。远程攻击者可借助暴力破解攻击利用该漏洞读取任意的CV文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-6668
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | exploit script for job manager plugin of wordpress | https://github.com/G01d3nW01f/CVE-2015-6668 | POC Details |
| 2 | None | https://github.com/crypticdante/CVE-2015-6668 | POC Details |
| 3 | None | https://github.com/H3xL00m/CVE-2015-6668 | POC Details |
| 4 | None | https://github.com/n3ov4n1sh/CVE-2015-6668 | POC Details |
| 5 | None | https://github.com/c0d3cr4f73r/CVE-2015-6668 | POC Details |
| 6 | Evangelos Mourikis POC for CVE-2015-6668 converted for Python 3 | https://github.com/jimdiroffii/CVE-2015-6668 | POC Details |
| 7 | None | https://github.com/Sp3c73rSh4d0w/CVE-2015-6668 | POC Details |
| 8 | None | https://github.com/0xwh1pl4sh/CVE-2015-6668 | POC Details |
| 9 | None | https://github.com/N3rdyN3xus/CVE-2015-6668 | POC Details |
| 10 | None | https://github.com/NyxByt3/CVE-2015-6668 | POC Details |
| 11 | None | https://github.com/h3xcr4ck3r/CVE-2015-6668 | POC Details |
| 12 | None | https://github.com/n3rdh4x0r/CVE-2015-6668 | POC Details |
| 13 | None | https://github.com/h3x0v3rl0rd/CVE-2015-6668 | POC Details |
| 14 | CVE-2015-6668, relacionada con el plugin WP Job Manager para WordPress (versiones ≤ 0.7.25). | https://github.com/NoTrustedx/Job-Manager-Disclosure | POC Details |
| 15 | A small Rust CLI that reproduces the information-disclosure pattern associated with CVE-2015-6668 (Job Manager <= 0.7.25). | https://github.com/nika0x38/CVE-2015-6668 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-6668
Please Login to view more intelligence information
- 🔗 https://wpvulndb.com/vulnerabilities/8167x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2015-6668
Same Patch Batch · n/a · 2017-10-19 · 46 CVEs total
| CVE-2017-12286 | Cisco Jabber 信息泄露漏洞 | |
| CVE-2017-12289 | Cisco IOS XE Software 安全漏洞 | |
| CVE-2017-12296 | Cisco WebEx Meetings Server 跨站脚本漏洞 | |
| CVE-2017-15609 | Octopus 安全漏洞 | |
| CVE-2017-15610 | Octopus 安全漏洞 | |
| CVE-2017-15611 | Octopus 安全漏洞 | |
| CVE-2017-15612 | Mistune 跨站脚本漏洞 | |
| CVE-2017-3883 | 多款Cisco产品Firepower Extensible Operating System和NX-OS System Software 资源管理错误漏洞 | |
| CVE-2017-12301 | 多款Cisco产品NX-OS Software Python scripting子系统安全漏洞 | |
| CVE-2017-12287 | Cisco Expressway Series Software和Cisco TelePresence Video Communication Server Software cl | |
| CVE-2017-12288 | Cisco Unified Contact Center Express 跨站脚本漏洞 | |
| CVE-2017-12285 | Cisco Network Analysis Module Software 路径遍历漏洞 | |
| CVE-2017-12284 | Cisco Jabber for Windows Client 信息泄露漏洞 | |
| CVE-2017-12272 | Cisco IOS XE Software Web框架跨站脚本漏洞 | |
| CVE-2017-12271 | Cisco SPA300和SPA500 Series IP Phones 跨站请求伪造漏洞 | |
| CVE-2017-12260 | Cisco Small Business SPA50x、SPA51x和SPA52x Series IP Phones 安全漏洞 | |
| CVE-2017-12259 | Cisco Small Business SPA51x Series IP Phones 安全漏洞 | |
| CVE-2017-12251 | Cisco Cloud Services Platform 2100 web console 权限许可和访问控制漏洞 | |
| CVE-2017-12579 | HashiCorp Vagrant VMware Fusion插件权限许可和访问控制漏洞 | |
| CVE-2017-10379 | Oracle MySQL Server组件安全漏洞 |
Showing top 20 of 46 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2015-6668
No comments yet