High severity8.8NVD Advisory· Published Sep 3, 2019· Updated Jun 17, 2026
CVE-2019-15858
CVE-2019-15858
Description
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
Affected products
3- WordPress/Woody ad snippetsdescription
- cpe:2.3:a:webcraftic:woody_ad_snippets:*:*:*:*:*:wordpress:*:*Range: <2.2.5
- Range: <2.2.5
Patches
Vulnerability mechanics
References
2- blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-woody-ad-snippets-plugin-lead-to-remote-code-execution/nvdExploitThird Party Advisory
- wpvulndb.com/vulnerabilities/9490nvdThird Party Advisory
News mentions
0No linked articles in our index yet.