CRITICAL

CVE-2019-16932

CVSS v3

10

CRITICAL

EPSS Score

80.8%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

Technical details

Published
9/30/2019

Frequently asked questions

What is CVE-2019-16932?

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

Is CVE-2019-16932 actively exploited?

Active exploitation of CVE-2019-16932 has not been confirmed. The EPSS score is 80.8%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2019-16932?

CVE-2019-16932 has a CVSS v3 base score of 10 (CRITICAL severity).

Is CVE-2019-16932 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.