CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

CVE-2019-17237

CVE-2019-17237 affects the WordPress IgniteUp plugin (up to v3.4). The vulnerability is a CSRF flaw in includes/class-coming-soon-creator.php, allowing unauthorized actions via CSRF. Evidence from multiple feeds confirms the plugin versions impacted ( IgniteUp

CVE-2019-17236

CVE-2019-17236 affects the WordPress IgniteUp plugin (up to version 3.4). The vulnerability is a stored XSS in includes/class-coming-soon-creator.php. Impact details are limited to stored XSS per sources; exploitation details are not provided in the documents. Remediation: upgrade to a fixed vers...

CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

CVE-2019-17235

CVE-2019-17235 affects the WordPress IgniteUp plugin up to version 3.4. The issue is in includes/class-coming-soon-creator.php and leads to information disclosure. Exploitation details are not provided in the documents; the impact is disclosure of sensitive information. Remediation: upgrade to a ...

CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17234

The CVE concerns the WordPress IgniteUp plugin (versions up to 3.4). The vulnerability stems from deleteTemplate() in includes/class-coming-soon-creator.php, which is hooked to admin_init and accepts a POST parameter delete_template without proper authorization checks. It builds a path to the plu...

CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

CVE-2019-17234: Missing Authentication for Critical Function

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...

PT-2019-15024

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue concerns a stored XSS vulnerability. It affects the igniteup plugin for WordPress, specifically the includes/class-coming-soon-creator.php file. Recommendations For...

CVE-2019-17236: Improper Neutralization of Input During Web Page Generation

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...

PT-2019-15023 · WordPress · Igniteup Plugin

Name of the Vulnerable Software and Affected Versions: igniteup plugin versions through 3.4 for WordPress Description: The issue allows information disclosure in the igniteup plugin for WordPress, specifically in the class-coming-soon-creator.php file. Recommendations: For versions through 3.4,...

CVE-2019-17237: Cross-Site Request Forgery (CSRF)

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...

PT-2019-15025

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue allows CSRF in the igniteup plugin for WordPress. Recommendations For versions through 3.4, update to a version that contains a fix for this issue...

PT-2019-15022

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue allows unauthenticated arbitrary file deletion due to a problem in the includes/class-coming-soon-creator.php file. Recommendations For versions through 3.4, update to a...

CVE-2019-17235: Missing Authentication for Critical Function

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...

WordPress IgniteUp plugin <=3.4 - Multiple vulnerabilities

Multiple vulnerabilities found by Jerome Bruandet in WordPress IgniteUp plugin versions =3.4. Vulnerabilities that could be exploited by unauthenticated users include Arbitrary File Deletion, HTML injection & CSRF in email messages, Stored Cross-Site Scripting XSS, Sensitive Information Disclosur...