Unrated severityNVD Advisory· Published Sep 3, 2019· Updated Aug 5, 2024
CVE-2019-15858
CVE-2019-15858
Description
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
Affected products
2- WordPress/Woody ad snippetsdescription
- Range: <2.2.5
Patches
Vulnerability mechanics
References
2- blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-woody-ad-snippets-plugin-lead-to-remote-code-execution/mitrex_refsource_MISC
- wpvulndb.com/vulnerabilities/9490mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.