Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2019-19979
Disclosure Date: February 28, 2019 (last updated November 27, 2024)
A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.
0
Attacker Value
Unknown
CVE-2018-20155
Disclosure Date: December 14, 2018 (last updated November 27, 2024)
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
0
Attacker Value
Unknown
CVE-2018-20156
Disclosure Date: December 14, 2018 (last updated November 27, 2024)
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
0
Attacker Value
Unknown
CVE-2018-20154
Disclosure Date: December 14, 2018 (last updated November 27, 2024)
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
0
Attacker Value
Unknown
CVE-2013-3250
Disclosure Date: June 21, 2013 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the WP Maintenance Mode plugin before 1.8.8 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that modify this plugin's settings.
0
