CVE-2019-15772 - The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting

MEDIUM

The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting

Published Aug 29, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.34%

The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6696		Advisory
https://threatpost.com/wordpress-plugins-exploited-in-ongoing-attack-researchers-warn/147671/		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/nd-donations/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9493		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 29, 2019

Updated Aug 5, 2024

Reserved Aug 29, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 29, 2019

Updated Aug 5, 2024

GitHub

No data