high7.5
CVE-2015-9488
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (s…
Impact
The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Almera Responsive Portfolio Site Template Project | Almera Responsive Portfolio Site Template | through 2015-05-15 |