CVE-2019-15828

The one-click-ssl plugin before 1.4.7 for WordPress has CSRF.

• CWE-352

• https://wordpress.org/plugins/one-click-ssl/#developersThird Party Advisory
• https://wpvulndb.com/vulnerabilities/9448Exploit, Third Party Advisory
• https://wordpress.org/plugins/one-click-ssl/#developersThird Party Advisory
• https://wpvulndb.com/vulnerabilities/9448Exploit, Third Party Advisory

Published

Aug 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15822The wps-child-theme-generator plugin before 1.2 for WordPres…
• CVE-2019-15823The wps-hide-login plugin before 1.5.3 for WordPress has an …
• CVE-2019-15824The wps-hide-login plugin before 1.5.3 for WordPress has an …
• CVE-2019-15825The wps-hide-login plugin before 1.5.3 for WordPress has an …
• CVE-2019-15826The wps-hide-login plugin before 1.5.3 for WordPress has a p…
• CVE-2019-15827The onesignal-free-web-push-notifications plugin before 1.17…
• CVE-2019-15829The photoblocks-grid-gallery plugin before 1.1.33 for WordPr…
• CVE-2019-1583Escalation of privilege vulnerability in the Palo Alto Netwo…
• CVE-2019-15830The icegram plugin before 1.10.29 for WordPress has ig_cat_l…
• CVE-2019-15831The visitors-traffic-real-time-statistics plugin before 1.12…
• CVE-2019-15832The visitors-traffic-real-time-statistics plugin before 1.13…
• CVE-2019-15833The simple-mail-address-encoder plugin before 1.7 for WordPr…6.1