Login Request a demo
WM
Product
WP Maintenance Mode
by Designmodo · last CVE Dec 14, 2018
3
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Maintenance Mode to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-20156
7.2
2%
Dec 14
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network
Affected: before 2.0.7
CVE-2018-20155
4.3
1%
Dec 14
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings
Affected: before 2.0.7
CVE-2018-20154
4.3
1%
Dec 14
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses
Affected: before 2.0.7
Showing 3