CVE-2021-36845

🗓️ 27 Sep 2021 15:36:56Reported by PatchstackType

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-36845	27 Sep 202120:35	–	circl
CNNVD	WordPress 跨站脚本漏洞	27 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-36845 YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities	27 Sep 202115:36	–	cvelist
EUVD	EUVD-2021-23421	7 Oct 202500:30	–	euvd
NVD	CVE-2021-36845	27 Sep 202116:15	–	nvd
Patchstack	WordPress YITH Maintenance Mode plugin <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities	23 Sep 202100:00	–	patchstack
Prion	Cross site scripting	27 Sep 202116:15	–	prion
Vulnrichment	CVE-2021-36845 YITH Maintenance Mode (WordPress plugin) <= 1.3.8 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities	27 Sep 202115:36	–	vulnrichment
WPVulnDB	YITH Maintenance Mode < 1.4.0 - Multiple Admin+ Stored Cross-Site Scripting	23 Sep 202100:00	–	wpvulndb

NVD

Vulners

Node

yithemes yith_maintenance_modeRange≤1.3.8wordpress

[
  {
    "product": "YITH Maintenance Mode (WordPress plugin)",
    "vendor": "YITH",
    "versions": [
      {
        "lessThanOrEqual": "1.3.8",
        "status": "affected",
        "version": "<= 1.3.8",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/yith-maintenance-mode/wordpress-yith-maintenance-mode-plugin-1-3-8-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
wordpress	www.wordpress.org/plugins/yith-maintenance-mode/

28 Apr 2026 16:07Current

5.2Medium risk

Vulners AI Score5.2

CVSS 23.5

CVSS 3.14.8 - 6.9

EPSS0.00717

SSVC

CWE-79