46 matches found
WordPress IgniteUp Arbitrary File Deletion Vulnerability
The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. An arbitrary file deletion vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. An attacker can exploit this vulnerability to delete arbitrary files...
WordPress IgniteUp Cross-Site Request Forgery Vulnerability
The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. A cross-site request forgery vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. No detailed vulnerability details are available at this time...
WordPress IgniteUp Cross-Site Scripting Vulnerability
The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. A stored cross-site scripting vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. No detailed vulnerability details are available at this time...
WordPress IgniteUp Plugin < 3.4.1 Multiple Vulnerabilities
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112665";...
WordPress IgniteUp Information Disclosure Vulnerability
The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. An information disclosure vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. An attacker could exploit this vulnerability to access sensitive information...
CVE-2019-17236
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...
CVE-2019-17234
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...
CVE-2019-17235
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2019-17235
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...
CVE-2019-17236
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...
CVE-2019-17234
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...
Cross site request forgery (csrf)
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
Arbitrary file deletion
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...
Information disclosure
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...
CVE-2019-17237
CVE-2019-17237 affects the WordPress IgniteUp plugin (up to v3.4). The vulnerability is a CSRF flaw in includes/class-coming-soon-creator.php, allowing unauthorized actions via CSRF. Evidence from multiple feeds confirms the plugin versions impacted ( IgniteUp
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2019-17236
CVE-2019-17236 affects the WordPress IgniteUp plugin (up to version 3.4). The vulnerability is a stored XSS in includes/class-coming-soon-creator.php. Impact details are limited to stored XSS per sources; exploitation details are not provided in the documents. Remediation: upgrade to a fixed vers...