CVE-2015-9491: Blessing Premium Responsive Project Blessing Premium Responsive

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct request for the wp-content/uploads/tmm_db_migrate/wp_users.dat URI.

Affected products

• Blessing Premium Responsive Project Blessing Premium Responsive: up to and including 2015-05-15

Published 2019-10-11. Last modified 2026-06-17.