CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects WordPress.
CVE
CVE-2019-15896
Severity
CRITICAL
CVSS
9.8
EPSS
7.45%
WordPress
Original NVD Description
An issue was discovered in the LifterLMS plugin through 3.34.5 for WordPress. The upload_import function in the class.llms.admin.import.php script is prone to an unauthenticated options import vulnerability that could lead to privilege escalation (administrator account creation), website redirection, and stored XSS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)