Vulnerabilities

TI-2021-14943 CVE-2021-36845 · GHSA-ppc5-qvp7-3j6h

Cross-site scripting in YITH Maintenance Mode

LOW 32

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that were missed by the vendor while patching the…

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.00715 Published 2021-09-27 No fix listed CWE-79

TI-2021-14940 CVE-2021-36841 · GHSA-gj7p-x2rc-x46v

YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability.

LOW 31

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter &yith_maintenance_newsletter_submit_label.

CVSS 3.1MEDIUM 6.9 Network High privileges User interaction EPSS 0.0063 Published 2021-09-27 No fix listed CWE-79

TI-2015-07806 CVE-2015-9429 · GHSA-7c2j-h93x-84vq

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS…

LOW 30

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00867 Published 2019-09-26 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting in YITH Maintenance Mode

YITH Maintenance Mode (WordPress plugin) <= 1.3.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability.

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS…