10 matches found
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2019-17236
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...
CVE-2019-17235
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...
CVE-2019-17234
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...
CVE-2019-17234: Missing Authentication for Critical Function
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion...
PT-2019-15024
Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue concerns a stored XSS vulnerability. It affects the igniteup plugin for WordPress, specifically the includes/class-coming-soon-creator.php file. Recommendations For...
CVE-2019-17237: Cross-Site Request Forgery (CSRF)
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF...
CVE-2019-17236: Improper Neutralization of Input During Web Page Generation
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS...
PT-2019-15022
Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress Description The issue allows unauthenticated arbitrary file deletion due to a problem in the includes/class-coming-soon-creator.php file. Recommendations For versions through 3.4, update to a...
CVE-2019-17235: Missing Authentication for Critical Function
includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure...