ABOUT
Overview
Use Cases
Mapping Methodology
Scoring Rubric
Related Projects
ATT&CK OBJECTS
Matrix
Tactics
Techniques
MAPPING FRAMEWORKS
About Mappings
Amazon Web Services (AWS)
Azure
CVE
Google Cloud Platform (GCP)
NIST 800-53
M365
VERIS
You're currently viewing ATT&CK Version 9.0 Enterprise and CVE 10.21.2021.
Change versions here.
Home
Mapping Frameworks
CVE Home
n/a
CVE
CVE-2018-19207
Mappings
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to execute arbitrary code because $wpdb->prepare() input is mishandled, as exploited in the wild in November 2018.
Mappings
ATT&CK Version
9.0
ATT&CK Domain
Enterprise
CVE
10.21.2021
Change Versions
Capability ID
Capability Description
Mapping Type
ATT&CK ID
ATT&CK Name
CVE-2018-19207
n/a
uncategorized
T1190
Exploit Public-Facing Application
CVE-2018-19207
n/a
uncategorized
T1499.004
Application or System Exploitation