CVE-2019-15863

Publication date

2019-09-03 11:41:51

Family

mitre

State

PUBLISHED

Description

The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.