CVSS 3.1
4.3 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NCVE-2015-9390
Medium (4.3) in admin management xtended project admin management xtended. EPSS 0.9% chance of exploitation in the next 30 days.
The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-269
- Published
- Modified
- Record from
- the NVD, synced
Affected
- admin_management_xtended_project:admin_management_xtended