CVE-2019-15867

ALTO 8.8CVE-2019-15867 · Published 03/09/2019 · updated 17/06/2026

In breve

CVE-2019-15867 è una vulnerabilità ALTO (CVSS 8.8) che riguarda slick-popup (omaksolutions).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.1%, superiore al 81.5% delle vulnerabilità.
Correzione: aggiornare a 1.7.2 o successiva.

Package	Affected versions	Patched versions
slick-popup omaksolutions	`< 1.7.2`	`1.7.2`

Description

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.

References

wordpress.org/plugins/slick-popup · Release Notes
wpvulndb.com/vulnerabilities/9317 · Exploit
wordfence.com/blog/2019/05/privilege-escalation-flaw-present-in-slick-popup-plugin · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free