CVE-2019-15895 - search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes

HIGH

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes

Published Sep 9, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.70%

search-exclude.php in the "Search Exclude" plugin before 1.2.4 for WordPress allows unauthenticated options changes.

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

Link	Providers	Tags
https://blog.nintechnet.com/settings-change-vulnerability-in-wordpress-search-exclude-plugin/		x_refsource_MISC
https://wordpress.org/plugins/search-exclude/#developers		x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9870		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Sep 9, 2019

Updated Aug 5, 2024

Reserved Sep 3, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a