Vulnerabilities

TI-2025-20802 CVE-2025-28859 · GHSA-69jh-579f-grhj

WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through <= 1.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00195 Published 2025-03-11 No fix listed CWE-352

TI-2024-05114 CVE-2024-5503 · GHSA-rpr4-fpwh-9vfr

WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion

MEDIUM 42

The WP Blog Post Layouts plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00822 Published 2024-06-21 No fix listed CWE-98

TI-2024-05178 CVE-2024-5574 · GHSA-cvpg-92pq-7j8r

WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion

LOW 36

The WP Magazine Modules Lite plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.2 via the 'blockLayout' parameter.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00758 Published 2024-06-19 No fix listed CWE-98

Vulnerabilities

Filters

WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

WP Blog Post Layouts <= 1.1.3 - Authenticated (Contributor+) Local File Inlcusion

WP Magazine Modules Lite <= 1.1.2 - Authenticated (Contributor+) Local File Inclusion