Designmodo Inc.

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Designmodo Inc. records in CISA KEV

No Designmodo Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Maintenance Mode 3 records LOW Qards 2 records MEDIUM

Records

5 records

TI-2022-19335 CVE-2022-40700 · GHSA-3mv9-fmvf-xvmx

Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins

MEDIUM 51

Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual walle…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00999 Published 2024-01-19 No fix listed CWE-918

TI-2018-14280 CVE-2018-20156 · GHSA-fpm4-976c-9f33

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 35

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01507 Published 2018-12-14 No fix listed CWE-20

TI-2017-13771 CVE-2017-18598 · GHSA-3p9x-xxjc-hw5p

The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified…

LOW 31

The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01933 Published 2019-09-10 No fix listed CWE-79

TI-2018-14278 CVE-2018-20154 · GHSA-58cv-85j3-j745

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 22

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00978 Published 2018-12-14 No fix listed CWE-200

TI-2018-14279 CVE-2018-20155 · GHSA-ph55-44jx-xj8c

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 21

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00779 Published 2018-12-14 No fix listed CWE-862

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0