CVE-2015-9390: Admin Management Xtended Project Admin Management Xtended

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.

Affected products

• Admin Management Xtended Project Admin Management Xtended: before 2.4.0.1 (fixed in 2.4.0.1)

Published 2019-09-20. Last modified 2026-06-17.