high7.5
CVE-2019-15863
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.
Impact
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Convertplug | Convertplus | before 3.4.5 |