CVE-2019-15896

2019-09-1016:15:12

Google

osv.dev

AI Score

Confidence

High

EPSS

0.002

Percentile

62.6%

JSON

An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.