← All advisories

Medium severity5.4NVD Advisory· Published Aug 29, 2019· Updated Jun 17, 2026

CVE-2019-15777

CVE-2019-15777

Description

The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Shapepress/Wp Dsgvo Tools
cpe:2.3:a:shapepress:wp_dsgvo_tools:*:*:*:*:*:wordpress:*:*
Range: <2.2.19
WordPress/shapepress-dsgvodescription
WordPress/Shapepress Dsgvollm-fuzzy
Range: <2.2.19
Package: https://wordpress.org/plugins/shapepress-dsgvo

Patches

Vulnerability mechanics

References

3

www.pluginvulnerabilities.com/2019/08/22/gdpr-plugins-for-wordpress-continue-to-be-insecure/nvdExploitThird Party Advisory
wordpress.org/plugins/shapepress-dsgvo/nvdProductThird Party Advisory
wpvulndb.com/vulnerabilities/9850nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.