Read the docs

wpdevart

Records58All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

wpdevart records in CISA KEV

No wpdevart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Booking Calendar 8 records HIGH Gallery 7 records LOW Coming Soon And Maintenance Mode 3 records LOW Organization Chart 3 records LOW Countdown And Countup, Woocommerce Sales Timer 2 records MEDIUM Poll, Survey, Questionnaire And Voting System 2 records HIGH Pricing Table Builder 2 records HIGH Responsive Vertical Icon Menu 2 records LOW

Records

3 records in Coming Soon And Maintenance Mode · all components

TI-2021-06861 CVE-2021-24577 · GHSA-32hf-ffvm-wx32

Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS

Priority LOW 25

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to sto…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0062 Published 2021-10-11 Fixed in 3.5.3 CWE-79
TI-2022-00137 CVE-2022-0199 · GHSA-4hmp-c47h-m87p

Coming soon and Maintenance mode < 3.6.8 - Arbitrary Email Sending to Subscribed Users via CSRF

Priority LOW 20

The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00471 Published 2022-02-21 Fixed in 3.6.8 CWE-352
TI-2022-00105 CVE-2022-0164 · GHSA-f5c9-gcjw-ghvw

Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed Users

Priority LOW 20

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its coming_soon_send_mail AJAX action, allowing any authenticated users, with a role as low as subscriber…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00349 Published 2022-02-21 Fixed in 3.5.3 CWE-352
Open these records in search →