CVE-2019-19985
92Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 5.8epss 71%
from disclosure to weapon213 days
Published on NVDDec 26
1st PoC+213d
VulnCheckNov 13
exploitation probability
71%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.
CVSS:3.0/AC:L/AV:N/A:N/C:L/I:N/PR:N/S:C/UI:N
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/48698unverifiedcve_referencepacketstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Newsletters-4.2.2-File-Disclosure.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.