CVE-2019-15779

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Aug 29, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-15786.1Cross-site scripting vulnerability in Palo Alto Networks MineMeld version 0.9.60 and earlier may allow a remote attacker able to convince anCVE-2019-157809.8The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.CVE-2019-157818.8The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.CVE-2019-157826.1WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.CVE-2019-157839.8Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.CVE-2019-157849.8Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.CVE-2019-157859.8FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.CVE-2019-157869.8ROBOTIS Dynamixel SDK through 3.7.11 has a buffer overflow via a large rxpacket.CVE-2019-157877.5libZetta.rs through 0.1.2 has an integer overflow in the zpool parser (for error stats) that leads to a panic.CVE-2019-157889.8Clara Genomics Analysis before 0.2.0 has an integer overflow for cudapoa memory management in allocate_block.cpp.CVE-2019-157897.8Privilege escalation vulnerability in MicroK8s allows a low privilege user with local access to obtain root access to the host by provisioniCVE-2019-15798.1Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or
CVE-2019-15779: High severity, CVSS 8.8 | Vulnix