CVE-2019-1010209: Gorul Gourl

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

GoUrl.io GoURL Wordpress Plugin 1.4.13 and earlier is affected by: CWE-434. The impact is: unauthenticated/unzuthorized Attacker can upload executable file in website. The component is: gourl.php#L5637. The fixed version is: 1.4.14.

Affected products

• Gorul Gourl: up to and including 1.4.13

Published 2019-07-23. Last modified 2026-06-17.