CVE-2019-15858

admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by…

published September 3, 2019

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18463 · 97.2th percentile
Published
2019-09-03T06:14Z
EPSS history
Timeline
  • 03 SEP 06:14Z
    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by…
    cvelistv5