CVE-2015-9269

7.5 highEPSS 3.2%

The export/content.php exportarticle feature in the wordpress-mobile-pack plugin before 2.1.3 2015-06-03 for WordPress allows remote attackers to obtain sensitive information because the content of a privately published post is sent in JSON format.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2018-10-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpmobilepack:wordpress_mobile_pack

References

https://seclists.org/fulldisclosure/2015/Jul/97
https://wordpress.org/plugins/wordpress-mobile-pack/#developers
https://www.openwall.com/lists/oss-security/2015/07/19/1
https://seclists.org/fulldisclosure/2015/Jul/97
https://wordpress.org/plugins/wordpress-mobile-pack/#developers

Check your stack JSON