3 matches found
CVE-2019-15816
The CVE-2019-15816 entry concerns the WordPress plugin wp-private-content-plus. Connected sources confirm that versions before 2.0 allow option changes via save_settings_page and other save_ functions without proper protection, enabling unauthenticated modification of plugin options. The vulnerab...
7.5CVSS7.6AI score0.01999EPSS
SaveExploits1References3Affected Software1
CVE-2019-15816
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...
7.7AI score0.01999EPSS
SaveExploits1References3
CVE-2019-15816: Improper Neutralization of Input During Web Page Generation
The wp-private-content-plus plugin before 2.0 for WordPress has no protection against option changes via savesettingspage and other save functions...
7.5CVSS5.7AI score0.01999EPSS
SaveExploits1References3
20