CVE-2019-11869

creationtimestamp| type| source ---|---|--- 2025-02-25 21:02:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lizr4fc3wn25...

CVE-2019-11869

The CVE-2019-11869 entry concerns the WordPress Yuzo Related Posts plugin before 5.12.94. A cross-site scripting (XSS) flaw arises because the plugin relies on is_admin() to verify the request origin, but that check only confirms the request targets an admin page, not that it comes from an admin ...