Search vulnerabilities

Results 3

Export CSV
CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.

CVSS 3.0 · 7.2 High EPSS 1.5% KEV · Not listed
Vendors
CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors