← All advisories

Medium severity6.1NVD Advisory· Published Aug 29, 2019· Updated Jun 17, 2026

CVE-2019-15771

CVE-2019-15771

Description

The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Components For Wp Bakery Page Builder Project/Components For Wp Bakery Page Builder
cpe:2.3:a:components_for_wp_bakery_page_builder_project:components_for_wp_bakery_page_builder:*:*:*:*:*:*:*:*
Range: <6.0
WordPress/nd-shortcodesdescription
WordPress/Nd Shortcodesllm-fuzzy
Range: <6.0

Patches

Vulnerability mechanics

References

3

threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/nvdExploitThird Party Advisory
wordpress.org/plugins/nd-shortcodes/nvdRelease NotesVendor Advisory
wpvulndb.com/vulnerabilities/9485nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.