CVE-2024-30480 WordPress CGC Maintenance Mode plugin <= 1.2 - IP Filtering Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.This issue affects CGC Maintenance Mode: from n/a through 1.2...

CVE-2024-30480 WordPress CGC Maintenance Mode plugin <= 1.2 - IP Filtering Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.This issue affects CGC Maintenance Mode: from n/a through 1.2...

CVE-2024-30480

CVE-2024-30480 describes anAuthentication Bypass by Spoofing vulnerability in the WordPress plugin CGC Maintenance Mode. Public sources (NVD/Red Hat/VulnEnrichment) confirm the issue affects CGC Maintenance Mode versions

WordPress plugin CGC Maintenance Mode 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Maintenance Mode 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2024-23406 · Unknown · Cgc Maintenance Mode

Name of the Vulnerable Software and Affected Versions: CGC Maintenance Mode versions 1.2 and earlier Description: The issue is related to an Authentication Bypass by Spoofing vulnerability, allowing functionality bypass in CGC Maintenance Mode. Recommendations: For CGC Maintenance Mode versions 1...

Maintenance Mode by helderk < 3.0.2 - Unauthenticated IP Spoofing

Description The Maintenance Mode plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 3.0.1 due to insufficient IP address validation. This makes it possible for unauthenticated attackers to spoof their IP Address...

Smart Maintenance Mode <= 1.4.4 - Cross-Site Request Forgery

Description The Smart Maintenance Mode plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized...

CVE-2024-33638

Cross-Site Request Forgery CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode.This issue affects Smart Maintenance Mode: from n/a through 1.4.4...

CVE-2024-33638 WordPress Smart Maintenance Mode plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode.This issue affects Smart Maintenance Mode: from n/a through 1.4.4...

CVE-2024-33638

CVE-2024-33638 is a CSRF vulnerability in Brijesh Kothari Smart Maintenance Mode for WordPress, affecting Smart Maintenance Mode versions from n/a through 1.4.4. The available documents provide the vulnerability description but do not specify the root cause details, affected functions, exploit me...

WordPress plugin Smart Maintenance Mode 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

WordPress Smart Maintenance Mode plugin <= 1.5.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by LeNgocHoa Patchstack Alliance in WordPress Plugin Smart Maintenance Mode versions = 1.5.3...

WordPress Smart Maintenance Mode Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smart Maintenance Mode Type Plugin Vulnerable versions = 1.4.4 Fixed in N/A OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2024-33638 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 65450ffbae04 Credits LeNgocHoa...

WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability

IP Bypass vulnerability discovered by LeNgocHoa Patchstack Alliance in WordPress Plugin Maintenance Mode by helderk versions = 3.0.1...

WordPress Maintenance Mode by helderk Plugin <= 3.0.1 is vulnerable to Bypass Vulnerability

Software Maintenance Mode by helderk Type Plugin Vulnerable versions = 3.0.1 Fixed in 3.0.2 OWASP Top 10 A5: Security Misconfiguration Classification Bypass Vulnerability CVE CVE-2024-32708 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID f7a912992b4c Credits LeNgocHoa...

CVE-2024-32088

Cross-Site Request Forgery CSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.15.20...

CVE-2024-32088

CVE-2024-32088 is a Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode. Affected: SeedProd Coming Soon Page/SeedProd (WordPress plugin) up to version 6.15.20. Root cause: CSRF vulnerability in the plugin’s handling of Coming Soon/Ma...

CVE-2024-3385

A packet processing mechanism in Palo Alto Networks PAN-OS software enables a remote attacker to reboot hardware-based firewalls. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual intervention to bring the firewall back online. This affects the...

CVE-2024-3384

A vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to reboot PAN-OS firewalls when receiving Windows New Technology LAN Manager NTLM packets from Windows servers. Repeated attacks eventually cause the firewall to enter maintenance mode, which requires manual...