CVE-2019-15648
MEDIUM
6.5
CVSS 3.0
Description
The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber.
Affected WordPress components
-
insert-or-embed-articulate-content-into-wordpress Plugin · insert-or-embed-articulate-content-into-wordpressVersions not specifiedView on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- elearningfreak insert_or_embed_articulate_content — Before 4.29991
References
- wordpress.org https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress/#developers Release Notes
- wpvulndb.com https://wpvulndb.com/vulnerabilities/9416 Exploit, Patch, Third Party Advisory
- nvd.nist.gov Official NVD record