CVE-2019-15872 - The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings

CRITICAL

The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings

Published Sep 3, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.21%

The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://wordpress.org/plugins/loginpress/#developers		x_refsource_MISCRelease NotesThird Party Advisory
https://www.webarxsecurity.com/loginpress-plugin/		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 3, 2019

Updated Aug 5, 2024

Reserved Sep 3, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a