CVE-2015-6738 in iFrame Plugin

Prediction

by VulDB Data Team • 03/25/2025

A vulnerability has been found in iFrame Plugin up to 3.0 on WordPress. Affected is the function get_params_from_url. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 08/27/2015
• Moderation: accepted
• Entry: VDB-301158
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Hostingprovider

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-6738
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-6738
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-6738/