Vulnerabilities

TI-2022-12693 CVE-2022-30536 · GHSA-2v4r-jr99-4q4h

WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00758 Published 2022-07-21 No fix listed CWE-79

TI-2021-14934 CVE-2021-36828 · GHSA-5wg3-2hmj-xfr7

WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00535 Published 2022-04-15 No fix listed CWE-79

TI-2019-14407 CVE-2019-19979 · GHSA-6rmj-vqg9-w2qx

A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable…

LOW 39

A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0063 Published 2019-12-26 No fix listed CWE-352

Vulnerabilities

Filters

WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable…