{"vulnerability": "CVE-2018-19207", "sightings": [{"uuid": "4f74df42-d270-4480-a477-a28dbcf16643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "5fde02ca-8adb-46ba-8f24-42dfd5083bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:06.000000Z"}, {"uuid": "5b878db7-c88f-4c0b-8fe3-e3c606682c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-19207.yaml", "content": "", "creation_timestamp": "2025-06-16T17:23:59.000000Z"}, {"uuid": "c2c30e9f-fe65-4050-8762-39d67fb5dcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ls2wqpnmny2o", "content": "", "creation_timestamp": "2025-06-20T21:02:17.905814Z"}, {"uuid": "7bef8c0d-51df-4c39-923f-e7fd28875d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wp_gdpr_compliance_privesc.rb", "content": "", "creation_timestamp": "2018-11-29T19:43:11.000000Z"}, {"uuid": "605e1190-7c99-4133-abc7-4db33f1e60bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxxjpvl7yu2q", "content": "", "creation_timestamp": "2025-09-03T21:02:24.576223Z"}, {"uuid": "4a85655c-ca7a-4ac1-b2d4-1c8abe218995", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3e9a053b-f510-45b4-b3c9-d1bfa6c341fd", "content": "", "creation_timestamp": "2026-06-19T12:53:13.387137Z"}, {"uuid": "6ae52a05-bf30-46c8-bd1a-03672870766c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82df9e94-005b-45ac-abcd-5bcfdadc4bb1", "content": "", "creation_timestamp": "2026-06-23T14:04:05.843966Z"}, {"uuid": "13aeb838-a939-400f-a38b-e0624d34acef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19207", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/wp_gdpr_compliance_privesc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Mikey Veenstra (WordFence)\", \"Thomas Labadie\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The Wordpress GDPR Compliance plugin <= v1.4.2 allows unauthenticated users to set\\n          wordpress administration options by overwriting values within the database.\\n\\n          The vulnerability is present in WordPress's admin-ajax.php, which allows unauthorized\\n          users to trigger handlers and make configuration changes because of a failure to do\\n          capability checks when executing the 'save_setting' internal action.\\n\\n          WARNING: The module sets Wordpress configuration options without reading their current\\n          values and restoring them later.\", \"disclosure_date\": \"2018-11-08\", \"fullname\": \"auxiliary/admin/http/wp_gdpr_compliance_privesc\", \"is_install_path\": true, \"mod_time\": \"2025-06-25 11:20:47 +0000\", \"name\": \"WordPress WP GDPR Compliance Plugin Privilege Escalation\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"config-changes\"], \"Stability\": []}, \"path\": \"/modules/auxiliary/admin/http/wp_gdpr_compliance_privesc.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/wp_gdpr_compliance_privesc\", \"references\": [\"URL-https://www.wordfence.com/blog/2018/11/privilege-escalation-flaw-in-wp-gdpr-compliance-plugin-exploited-in-the-wild/\", \"CVE-2018-19207\", \"WPVDB-9144\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:51.768916Z"}]}