CVE-2019-15858
23Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 18%
exploitation probability
18%top 3% of all CVEs
observed exploitation
nono source reports it
admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.
Affected products
n/a · n/a