← Back to CVE List

CVE-2019-11886

Published: 2019-05-13T05:29Z
Last Modified: 2024-11-21T04:21Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt