Vulnerability Database

309,134

Total vulnerabilities in the database

CVE-2019-15873

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.

  • Published: Sep 3, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-15873
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
metagauss / profilegrid - 2.8.6