CVE-2019-17574
🗓️ 14 Oct 2019 13:55:36Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 186 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2019-17574 | 8 Jan 202414:41 | – | circl |
 | WordPress Popup Maker Plugin Has Unspecified Vulnerability | 16 Oct 201900:00 | – | cnvd |
 | CVE-2019-17574 | 14 Oct 201913:55 | – | cvelist |
 | Popup-Maker < 1.8.12 - Broken Authentication | 12 Jul 202309:13 | – | nuclei |
| Popup-Maker < 1.8.12 - Broken Authentication | 5 Sep 202602:04 | – | nuclei |
 | CVE-2019-17574 | 14 Oct 201914:15 | – | nvd |
 | WordPress Popup Maker Plugin < 1.8.13 Authorization Bypass Vulnerability | 23 Feb 202300:00 | – | openvas |
 | Deserialization of untrusted data | 14 Oct 201914:15 | – | prion |
 | PT-2019-15207 | 14 Oct 201900:00 | – | ptsecurity |
 | CVE-2019-17574 | 22 May 202510:02 | – | redhatcve |
10
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| pum_action | query param | /?pum_action=tools_page_tab_system_info | Unauthenticated attacker can partially control arguments to invoke popmake_ or pum_ methods via do_action, enabling execution of functions that require no arguments or a single array argument. | CWE-639 |
| popmake_action | request body | / | POST payload can trigger popmake_ or pum_ methods through do_action by manipulating request body parameters, enabling execution of functions like sysinfo_download/sysinfo_display. | CWE-639 |
| popmake-sysinfo | request body | / | POST payload can trigger popmake_ or pum_ methods through do_action by manipulating request body parameters, enabling execution of functions like sysinfo_download/sysinfo_display. | CWE-639 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:24Current
9.1High risk
Vulners AI Score9.1
CVSS 26.4
CVSS 3.19.1
EPSS0.09432