CVE-2019-14679

MEDIUM

ARPrice Lite 2.2 - Cross-Site Request Forgery in Import/Export Page

Title source: llm

core/views/arprice_import_export.php in the ARPrice Lite plugin 2.2 for WordPress allows wp-admin/admin.php?page=arplite_import_export CSRF.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 6.5

EPSS 0.0069

EPSS Percentile 48.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CWE

CWE-352

Status published

Products (1)

reputeinfosystems/arprice_lite 2.2

Published Aug 08, 2019

Tracked Since Feb 18, 2026