← All advisories

High severity8.8NVD Advisory· Published Aug 27, 2019· Updated Jun 17, 2026

CVE-2019-15647

CVE-2019-15647

Description

The groundhogg plugin before 1.3.5 for WordPress has wp-admin/admin-ajax.php?action=bulk_action_listener remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/groundhoggdescription
WordPress/Groundhoggllm-fuzzy
Range: <1.3.5
Package: https://wordpress.org/plugins/groundhogg
Groundhogg/Groundhogg
cpe:2.3:a:groundhogg:groundhogg:*:*:*:*:*:wordpress:*:*
Range: <1.3.5

Patches

Vulnerability mechanics

References

3

www.pluginvulnerabilities.com/2019/04/05/our-proactive-monitoring-caught-an-authenticated-remote-code-execution-rce-vulnerability-being-introduced-in-to-groundhoggnvdExploitThird Party Advisory
wpvulndb.com/vulnerabilities/9834nvdThird Party Advisory
wordpress.org/plugins/groundhogg/nvdRelease Notes

News mentions

0

No linked articles in our index yet.