{"cvss":0.0,"datePublished":"2019-04-11T00:00:00Z","dateUpdated":"2019-04-11T00:00:00Z","description":"The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customizer) plugin before 7.2.1 for WordPress allows yp_option_update CSRF, as demonstrated by use of yp_remote_get to obtain admin access.","dueDate":"","id":"CVE-2019-11886","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"visual_css_style_editor","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"yellowpencil visual_css_style_editor Cross-Site Request Forgery","vendor":"yellowpencil"}