CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

CVE-2019-17234

The CVE concerns the WordPress IgniteUp plugin (versions up to 3.4). The vulnerability stems from deleteTemplate() in includes/class-coming-soon-creator.php, which is hooked to admin_init and accepts a POST parameter delete_template without proper authorization checks. It builds a path to the plu...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

PT-2019-15023 · WordPress · Igniteup Plugin

Name of the Vulnerable Software and Affected Versions: igniteup plugin versions through 3.4 for WordPress Description: The issue allows information disclosure in the igniteup plugin for WordPress, specifically in the class-coming-soon-creator.php file. Recommendations: For versions through 3.4,...