Lucene search

Wp Maintenance Mode Security Vulnerabilities

cve

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.

4.3CVSS

5AI Score

0.001EPSS

2018-12-14 10:29 PM

cve

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

4.3CVSS

4.9AI Score

0.001EPSS

2018-12-14 10:29 PM

cve

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.

7.2CVSS

7.1AI Score

0.002EPSS

2018-12-14 10:29 PM