{"id":"CVE-2015-4070","aliases":["EUVD-2015-4096","GHSA-rxx2-v8q7-wjvq"],"status":"published","title":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite...","description":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01406,"percentile":0.72751,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-601"],"published":"2017-05-17T14:00:00Z","modified":"2026-06-17T00:26:43Z","products":[{"vendor":"wow_new_media","product":"wow_moodboard_lite"}],"references":[{"url":"http://www.securityfocus.com/bid/75047","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vapid.dhs.org/advisory.php?v=120","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4070"},{"url":"https://github.com/advisories/GHSA-rxx2-v8q7-wjvq"}],"sources":{"cve":[{"id":"CVE-2015-4070","description":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.","status":"published","published":"2017-05-17T14:00:00Z","modified":"2024-08-06T06:04:02.685Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-4096","description":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.","status":"published","published":"2017-05-17T14:00:00Z","modified":"2024-08-06T06:04:02Z","updated_at":"2026-11-03T02:22:05.665475Z"}],"ghsa":[{"id":"GHSA-rxx2-v8q7-wjvq","title":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite...","description":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.","status":"published","published":"2022-05-17T02:44:03Z","modified":"2023-01-27T05:05:54Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:42:47.671932Z"}],"nvd":[{"id":"CVE-2015-4070","description":"Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.","status":"published","published":"2017-05-17T14:29:00.243Z","modified":"2026-06-17T00:26:43.567Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-601"],"updated_at":"2026-11-02T14:03:17.730372Z"}]}}