CVE-2019-15774

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting

published August 29, 2019

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01731 · 77.4th percentile
Published
2019-08-29T11:42Z
EPSS history
Timeline
  • 29 AUG 11:42Z
    The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting
    cvelistv5