CVE-2018-19207
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 88%
from disclosure to weapon15 days
Published on NVDNov 12
1st PoC+15d
metasploitNov 8
VulnCheckNov 9
exploitation probability
88%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.
Affected products
n/a · n/apublic PoCs found — 2
vulncheckvulncheck.com/xdb/36d1a44178caunverifiedvulncheckvulncheck.com/xdb/ba7b7f4736fbunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.