CVE-2019-15650

The stops-core-theme-and-plugin-updates plugin before 8.0.5 for WordPress has insufficient restrictions on option changes (such as disabling unattended theme updates) because of a nonce check error.

Score

CVSS 3.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2019-08-27

Last modified

2024-08-05

Affected products

• Easy Updates Manager (Easyupdatesmanager)

References

• https://wordpress.org/plugins/stops-core-theme-and-plugin-updates/#developers
• https://wpvulndb.com/vulnerabilities/9837