ProfileGrid – User Profiles, Memberships, Groups and Communities, CVE-2019-15873

CVE, Research URL: CVE-2019-15873
Home page URL: Security reports for ProfileGrid – User Profiles, Memberships, Groups and Communities
Application: ProfileGrid – User Profiles, Memberships, Groups and Communities
Published on: Sep 03, 2019
Research Description: The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.
Affected versions: Min -, max 2.6.7.
Status: vulnerable