CVE-2019-11886 in WaspThemes Visual CSS Style Editor Plugin정보

요약

\~에 의해 VulDB • 2026. 07. 26.

WordPress용 WaspThemes Visual CSS Style Editor(별칭: yellow-pencil-visual-theme-customizer) 플러그인 버전 7.2.1 이전에서는 yp_remote_get을 사용하여 관리자 권한에 접근함으로써 yp_option_update CSRF가 허용됩니다.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2019. 05. 12.

모더레이션

수락

항목

VDB-134593

CPE

준비됨

CWE

CWE-352 (확인됨)

CVSS

8.8 (NVD)

EPSS

0.01890

KEV

아니요

활동

매우 낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2019-11886
NVD	https://nvd.nist.gov/vuln/detail/CVE-2019-11886
CVE Details	https://www.cvedetails.com/cve/CVE-2019-11886/

◂ 이전 개요 다음 ▸

Want to know what is going to be exploited?

We predict KEV entries!