Code injection

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

CVE-2018-20155

CVE-2018-20155 affects the WordPress WP Maintenance Mode plugin prior to version 2.0.7. The vulnerability allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings, exposing a flaw in authorization for configuration changes. The issue is doc...

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

CVE-2018-20156

CVE-2018-20156 affects the WordPress WP Maintenance Mode plugin (before 2.0.7). A remote authenticated site administrator can execute arbitrary PHP code across a multisite network. Public sources confirm this plugin version before 2.0.7 is vulnerable; exploitation status is not detailed in the pr...

CVE-2018-20154

CVE-2018-20154 affects the WordPress WP Maintenance Mode plugin prior to 2.0.7. The vulnerability allows remote authenticated users to disclose all subscriber email addresses, constituting an information-disclosure flaw in the plugin’s handling of subscriber data. The impact is confined to partia...

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

CVE-2018-20156: Improper Input Validation

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

CVE-2018-20154: Exposure of Sensitive Information to an Unauthorized Actor

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

PT-2018-15276

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 2.0.7 Description The issue allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings. Recommendations For WP Maintenance Mode plugin versions...

CVE-2018-20155: Missing Authorization

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

PT-2018-15277

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 2.0.7 Description The issue allows remote authenticated site administrator users to execute arbitrary PHP code throughout a multisite network. Recommendations For WP Maintenance Mode plugin versions...

PT-2018-15275

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode plugin versions prior to 2.0.7 Description The issue allows remote authenticated users to discover all subscriber e-mail addresses. Recommendations For WP Maintenance Mode plugin versions prior to 2.0.7, update to version...

Security Bulletin: Security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1897, CVE-2018-1723)

Summary IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1897)

Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about some security vulnerabilities affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the...

6 Critical Website Elements You Need to Review

By Carolina Just like a car needs regular maintenance, your business’s website needs a review to ensure that it is performing to the best of its capabilities. Whether you have noticed a reduction in visitor numbers, or are responding to feedback from customers, reviewing your website is a busines...