CVE-2019-14788

wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with…

published August 15, 2019

CVSS
—
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03711 · 89.7th percentile
Published
2019-08-15T15:45Z
EPSS history
Timeline
  • 15 AUG 15:45Z
    wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with…
    cvelistv5