Exploit for Missing Authentication for Critical Function in Getigniteup Igniteup

Wordpress IgniteUp plugin vulnerability Wordpress IgniteUp plu...

WordPress IgniteUp Cross-Site Scripting Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. A stored cross-site scripting vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. No detailed vulnerability details are available at this time...

WordPress IgniteUp Information Disclosure Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. An information disclosure vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. An attacker could exploit this vulnerability to access sensitive information...

WordPress IgniteUp Cross-Site Request Forgery Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. A cross-site request forgery vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. No detailed vulnerability details are available at this time...

WordPress IgniteUp Plugin < 3.4.1 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112665";...

WordPress IgniteUp Arbitrary File Deletion Vulnerability

The WordPress plugin IgniteUp is used to create "Coming Soon" and "Maintenance" mode pages. An arbitrary file deletion vulnerability exists in includes/class-coming-soon-creator.php in IgniteUp 3.4 and earlier versions. An attacker can exploit this vulnerability to delete arbitrary files...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

Cross site request forgery (csrf)

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

Information disclosure

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

Arbitrary file deletion

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17237

CVE-2019-17237 affects the WordPress IgniteUp plugin (up to v3.4). The vulnerability is a CSRF flaw in includes/class-coming-soon-creator.php, allowing unauthorized actions via CSRF. Evidence from multiple feeds confirms the plugin versions impacted ( IgniteUp

CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17236

CVE-2019-17236 affects the WordPress IgniteUp plugin (up to version 3.4). The vulnerability is a stored XSS in includes/class-coming-soon-creator.php. Impact details are limited to stored XSS per sources; exploitation details are not provided in the documents. Remediation: upgrade to a fixed vers...