CVE-2019-15871

The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.

• CWE-862

• https://wordpress.org/plugins/loginpress/#developersRelease Notes, Third Party Advisory
• https://www.webarxsecurity.com/loginpress-plugin/Exploit, Third Party Advisory
• https://wordpress.org/plugins/loginpress/#developersRelease Notes, Third Party Advisory
• https://www.webarxsecurity.com/loginpress-plugin/Exploit, Third Party Advisory

Published

Sep 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15866The crelly-slider plugin before 1.3.5 for WordPress has arbi…
• CVE-2019-15867The slick-popup plugin before 1.7.2 for WordPress has a hard…
• CVE-2019-15868The affiliates-manager plugin before 2.6.6 for WordPress has…
• CVE-2019-15869The JobCareer theme before 2.5.1 for WordPress has stored XS…
• CVE-2019-1587A vulnerability in Cisco Nexus 9000 Series Fabric Switches i…4.3
• CVE-2019-15870The CarSpot theme before 2.1.7 for WordPress has stored XSS …
• CVE-2019-15872The LoginPress plugin before 1.1.4 for WordPress has SQL inj…
• CVE-2019-15873The profilegrid-user-profiles-groups-and-communities plugin …
• CVE-2019-15874In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 1…9.8
• CVE-2019-15875In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 1…3.3
• CVE-2019-15876In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 1…5.5
• CVE-2019-15877In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE befor…5.5