CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects WordPress. It may be remotely exploitable.
CVE
CVE-2019-11886
Severity
HIGH
CVSS
8.8
EPSS
1.89%
WordPress
Original NVD Description
The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access.
Related CVEs
Other vulnerabilities affecting the same vendor(s)