DE
Vendor
Designmodo
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-40700 | QA Qards Designmodo | 9.8 | Jan 19 | Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins |
| CVE-2017-18598 | QA Qards Designmodo | 6.1 | Sep 10 | The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php |
| CVE-2018-20156 | WM WP Maintenance Mode Designmodo | 7.2 | Dec 14 | The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network |
| CVE-2018-20155 | WM WP Maintenance Mode Designmodo | 4.3 | Dec 14 | The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings |
| CVE-2018-20154 | WM WP Maintenance Mode Designmodo | 4.3 | Dec 14 | The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses |
