← All advisories

Unrated severityNVD Advisory· Published Aug 29, 2019· Updated Aug 5, 2024

CVE-2019-15774

CVE-2019-15774

Description

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/nd-bookingdescription
WordPress/Nd Bookingllm-fuzzy
Range: <2.5
Package: https://wordpress.org/plugins/nd-booking

Patches

Vulnerability mechanics

References

3

threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/mitrex_refsource_MISC
wordpress.org/plugins/nd-booking/mitrex_refsource_MISC
wpvulndb.com/vulnerabilities/9494mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.