medium5.4
CVE-2019-15777
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.
Impact
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shapepress | Wp Dsgvo Tools | before 2.2.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/shapepress-dsgvo/#developers
- https://wpvulndb.com/vulnerabilities/9850
- https://www.pluginvulnerabilities.com/2019/08/22/gdpr-plugins-for-wordpress-continue-to-be-insecure/
- https://wordpress.org/plugins/shapepress-dsgvo/#developers
- https://wpvulndb.com/vulnerabilities/9850
- https://www.pluginvulnerabilities.com/2019/08/22/gdpr-plugins-for-wordpress-continue-to-be-insecure/