Unscored CVE-2019-15867 EUVD-2019-6778GHSA-34g7-g5m3-mfmr

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber c…

Published Sep 3, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.

References

https://wpvulndb.com/vulnerabilities/9317
https://wordpress.org/plugins/slick-popup/#developers
https://www.wordfence.com/blog/2019/05/privilege-escalation-flaw-present-in-slick-popup-plugin/