Lucene search

K
cvelistMitreCVELIST:CVE-2019-19979
HistoryDec 26, 2019 - 2:26 a.m.

CVE-2019-19979

2019-12-2602:26:32
mitre
www.cve.org
2

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H

AI Score

8.6

Confidence

High

EPSS

0.004

Percentile

72.8%

A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site’s maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H

AI Score

8.6

Confidence

High

EPSS

0.004

Percentile

72.8%

Related for CVELIST:CVE-2019-19979