What is CVE-2015-1581?

CVE-2015-1581 is a vulnerability in Mobile Domain Project, classified under Cross-Site Request Forgery (CSRF). Published 2015-02-11.

Is CVE-2015-1581 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

CSRF in Mobile Domain Project

CVE-2015-1581

Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings or conduct cross-site scripting (XSS) attacks via the (2) domain, (3) text, (4) font, (5) fontcolor, (6) color, or (7) padding parameter in an add-domain action in the mobile-domain page to wp-admin/options-general.php.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

Affected products

Mobile_domain_project Mobile_domain — versions 1.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-1581?: CVE-2015-1581 is a vulnerability in Mobile Domain Project, classified under Cross-Site Request Forgery (CSRF). Published 2015-02-11.
Is CVE-2015-1581 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.