4 matches found
CVE-2019-15863
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
CVE-2019-15863
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
Cross site request forgery (csrf)
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation with the none role via a request for variants...
PT-2019-14442
Name of the Vulnerable Software and Affected Versions ConvertPlus plugin versions prior to 3.4.5 Description The issue allows for unintended account creation with the none role via a request for variants. Recommendations For versions prior to 3.4.5, update to version 3.4.5 or later to resolve the...