Vulnerability identifier: #VU15793

Vulnerability risk: High

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2018-19207

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 5

• July 30, 2020
  • wp-plugins-poc (Collection of WordPress Plugin PoC - For Educational Purposes ONLY) [Github]
• July 25, 2020
  • wp-plugins-poc (Collection of WordPress Plugin PoC - For Educational Purposes ONLY) [Github]
• March 18, 2020
  • wp-plugins-poc (Collection of WordPress Plugin PoC - For Educational Purposes ONLY) [Github]
  • WordPress WP GDPR Compliance Plugin Privilege Escalation [Metasploit]
  • WP-GDPR-Compliance-Plugin-Exploit (Exploit of the privilege escalation vulnerability of the WordPress plugin "WP GDPR Compliance" by "Van Ons" (https://de.wordpress.org/plugins/wp-gdpr-compliance/) CVE-2018-19207) [Github]

Impact: Code execution

Vulnerable software:
WP GDPR Compliance
Web applications / Modules and components for CMS

Vendor: WordPress.ORG