EUVD-2019-7653

Malware in sbrugna...

WordPress IgniteUp Information Disclosure Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. An information disclosure vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. An attacker could exploit this vulnerability to access sensitive information...

CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17234: Missing Authentication for Critical Function

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

PT-2019-15024

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue concerns a stored XSS vulnerability. It affects the igniteup plugin for WordPress, specifically the includes/class-coming-soon-creator.php file. Recommendations For...

PT-2019-15023 · WordPress · Igniteup Plugin

Name of the Vulnerable Software and Affected Versions: igniteup plugin versions through 3.4 for WordPress Description: The issue allows information disclosure in the igniteup plugin for WordPress, specifically in the class-coming-soon-creator.php file. Recommendations: For versions through 3.4,...

CVE-2019-17237: Cross-Site Request Forgery (CSRF)

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17236: Improper Neutralization of Input During Web Page Generation

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

PT-2019-15022

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue allows unauthenticated arbitrary file deletion due to a problem in the includes/class-coming-soon-creator.php file. Recommendations For versions through 3.4, update to a...

CVE-2019-17235: Missing Authentication for Critical Function

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...