Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-25139
HistoryJun 07, 2023 - 2:15 a.m.

Design/Logic Flaw

2023-06-0702:15:00
PRIOn knowledge base
www.prio-n.com
8
wordpress
coming soon page
vulnerability
unauthenticated
settings reset
maintenance mode
plugin

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php file which makes it possible for unauthenticated attackers to trigger a plugin settings reset.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

Related for PRION:CVE-2019-25139