Security Advisory

CVE-2019-15873

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-03 12:22:19

Last updated 2024-08-05 01:03:32

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.

← Browse all CVEs View on cve.org ↗