CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2019-20209
High (7.5) in cththemes. EPSS 3.2% chance of exploitation in the next 30 days.
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.
Severity
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-79, CWE-639
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cththemes:citybook
- cththemes:easybook
- cththemes:townhub