Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-15839 Details

The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://wordpress.org/plugins/sina-extension-for-elementor/#developers	CVE	Release NotesVendor Advisory
https://wpvulndb.com/vulnerabilities/9368	CVE	Third Party Advisory
https://www.pluginvulnerabilities.com/2019/06/18/our-proactive-monitoring-caught-a-local-file-inclusion-lfi-vulnerability-being-added-in-to-sina-extension-for-elementor/	CVE
https://wordpress.org/plugins/sina-extension-for-elementor/#developers	[email protected]	Release NotesVendor Advisory
https://wpvulndb.com/vulnerabilities/9368	[email protected]	Third Party Advisory
https://www.pluginvulnerabilities.com/2019/06/18/our-proactive-monitoring-caught-a-local-file-inclusion-lfi-vulnerability-being-added-in-to-sina-extension-for-elementor/	[email protected]

CWE-ID	CWE Name	Source
CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	[email protected]
CWE-829	Inclusion of Functionality from Untrusted Control Sphere	[email protected]

Product	Versions
sinaextra sina extension for elementor	< 2.2.1
CPE cpe:2.3:a:sinaextra:sina_extension_for_elementor::::::wordpress::* Remediation No remediation found in references.

7 change records found show changes

QUICK INFO