Cross-site Scripting Vulnerability in WP Smiley Plugin for WordPress
CVE-2015-4139

Currently unrated

Key Information:

Vendor: Wordpress
Status: WP Smiley
Vendor: CVE Published:; 18 June 2015

What is CVE-2015-4139?

A cross-site scripting (XSS) vulnerability exists in the WP Smiley plugin version 1.4.1 for WordPress. This issue allows remote authenticated users to inject malicious web scripts or HTML code through the 's4w-more' parameter when accessing the options in the WordPress admin panel. By exploiting this vulnerability, attackers could potentially manipulate content or execute harmful scripts within the context of the user's session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch