Remote Code Execution Vulnerability in Groundhogg Plugin for WordPress
CVE-2019-15647

8.8HIGH

Key Information:

Vendor: Wordpress
Status: Groundhogg
Vendor: CVE Published:; 27 August 2019

What is CVE-2019-15647?

The Groundhogg plugin for WordPress prior to version 1.3.5 is susceptible to remote code execution through its admin-ajax.php functionality with the 'bulk_action_listener' action. This vulnerability allows an authenticated attacker to execute arbitrary code on the server, posing a significant risk to WordPress sites utilizing this plugin. Proper updates and security patches are essential to mitigate this vulnerability and protect web applications from potential exploitation.