CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2019-15774Public Exploit

ND Booking - Authentication Bypass (CVE-2019-15774)

PublishedAug 29, 2019
First SeenOct 29, 2025
Last Seen
Reported
CVSS6.1
Nicdark
NicdarkND Booking
wordpress

Description

The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

psychologyCrowdSec Analysis

CVE-2019-15774 is a vulnerability in the nd-booking plugin for WordPress prior to version 2.5, where an unauthenticated AJAX action allows attackers to modify the siteurl setting. This flaw could be exploited to redirect users, disrupt site functionality, or facilitate further attacks such as phishing or site takeover.

CrowdSec has been tracking this vulnerability and its exploits since 24th of September 2025.

CrowdSec has not observed any significant exploitation activity targeting CVE-2019-15774 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

Attackers exploit unauthenticated requests to /wp-admin/admin-ajax.php with the action=nd_booking_import_settings_php_function parameter to change plugin options without authorization.

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2019-08-29
Rule Released2025-09-24
CrowdSec First Seen2025-10-29

Related Weaknesses

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References