CVE-2019-15873

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with…

published September 3, 2019

CVSS
—
EPSS
4%
Percentile
90.2
In the wild
Unconfirmed
What it is

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03883 · 90.2th percentile
Published
2019-09-03T12:22Z
EPSS history
Timeline
  • 03 SEP 12:22Z
    The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with…
    cvelistv5