Security Advisory
CVE-2019-15863
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.