CVE-2015-10093 describes a cross-site scripting (XSS) vulnerability in the Mark User as Spammer Plugin versions 1.0.0 and 1.0.1 for WordPress, specifically within the user_row_actions function of the plugin.php file. This medium-severity vulnerability (CVSS 5.4) requires user interaction and authenticated access (PR:L, UI:R) to exploit, with a high attack complexity, making exploitation difficult. While it can be launched remotely, the potential impact is limited to low confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Users are advised to upgrade to version 1.0.2 to remediate the issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.0CPE matchmatch criteria | cpe:2.3:a:mark_user_as_spammer_project:mark_user_as_spammer:1.0.0:*:*:*:*:wordpress:*:* | ||
1.0.1CPE matchmatch criteria | cpe:2.3:a:mark_user_as_spammer_project:mark_user_as_spammer:1.0.1:*:*:*:*:wordpress:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.