Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbChloe ChamberlandWPVDB-ID:D4ABE672-91FB-4F1C-8970-3D600AA8513F
HistoryNov 19, 2019 - 12:00 a.m.

WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

2019-11-1900:00:00
Chloe Chamberland
wpscan.com
6

EPSS

0.004

Percentile

72.8%

JSON

No nonce protection on form submissions leading to CSRF and no input/output sanitization allowing for XSS when CSRF is exploited.

PoC

Related

prion 1
cve 1
symantec 1
nvd 1
cvelist 1
wpexploit 1
prion
prion
Cross site request forgery (csrf)
2019-12-26 03:15:00
cve
cve
CVE-2019-19979
2019-12-26 03:15:11
symantec
symantec
WordPress WP Maintenance Plugin CVE-2019-19979 Cross Site Request Forgery Vulnerability
2019-11-19 00:00:00
nvd
nvd
CVE-2019-19979
2019-12-26 03:15:11
cvelist
cvelist
CVE-2019-19979
2019-12-26 02:26:32
wpexploit
wpexploit
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
2019-11-19 00:00:00

EPSS

0.004

Percentile

72.8%

JSON
Related for WPVDB-ID:D4ABE672-91FB-4F1C-8970-3D600AA8513F
prion1cve1symantec1nvd1cvelist1wpexploit1