Vulnerabilities

TI-2018-14280 CVE-2018-20156 · GHSA-fpm4-976c-9f33

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 35

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01507 Published 2018-12-14 No fix listed CWE-20

TI-2018-14279 CVE-2018-20155 · GHSA-ph55-44jx-xj8c

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 21

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00779 Published 2018-12-14 No fix listed CWE-862

TI-2018-14278 CVE-2018-20154 · GHSA-58cv-85j3-j745

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

LOW 22

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00978 Published 2018-12-14 No fix listed CWE-200

Vulnerabilities

Filters

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated…