← All advisories

Medium severity6.1NVD Advisory· Published Aug 29, 2019· Updated Jun 17, 2026

CVE-2019-15774

CVE-2019-15774

Description

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/nd-bookingdescription
WordPress/Nd Bookingllm-fuzzy
Range: <2.5
Package: https://wordpress.org/plugins/nd-booking
Booking Project/Booking
cpe:2.3:a:booking_project:booking:*:*:*:*:*:wordpress:*:*
Range: <2.5

Patches

Vulnerability mechanics

References

3

threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/nvdExploitThird Party Advisory
wordpress.org/plugins/nd-booking/nvdProductThird Party Advisory
wpvulndb.com/vulnerabilities/9494nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.