TI-2015-01976 CVE-2015-2218 · GHSA-5jmf-jhrj-6wcpMultiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in…Priority LOW 27Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to inject arbitrary w…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04186 · Published 2015-03-05 · No fix listed CWE-79