CVE-2019-9646

MEDIUM · CVSS 6.1 EPSS 1.39%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2019-9646

Severity

MEDIUM

CVSS

6.1

EPSS

1.39%

WordPress

Original Filing — NVD Description

The Contact Form Email plugin before 1.2.66 for WordPress allows wp-admin/admin.php item XSS, related to cp_admin_int_edition.inc.php in the "custom edition area."