2 matches found
CVE-2019-15873
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview&html=?php substring followed by PHP code...
8.8CVSS0.03883EPSS
SaveExploits2References2
CVE-2019-15873: Improper Control of Generation of Code
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview&html=...
8.8CVSS8.2AI score0.03883EPSS
SaveExploits2References2
20