Lucene search
+L

3993 matches found

CNVD
CNVD
added 2018/12/17 12:0 a.m.3 views

WordPress WP Maintenance Mode Plugin Arbitrary PHP Code Execution Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. An arbitrary PHP code...

7.2CVSS7.8AI score0.01507EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/12/17 12:0 a.m.4 views

WordPress WP Maintenance Mode Plugin Access Restriction Bypass Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. WordPress WP Maintenanc...

4.3CVSS6.6AI score0.00779EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/12/17 12:0 a.m.5 views

WordPress WP Maintenance Mode Plugin Information Disclosure Vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Maintenance Mode Plugin is used in one of the site maintenance page settings plugin. An information disclosu...

4.3CVSS6.1AI score0.00978EPSS
SaveExploits0References1
Prion
Prion
added 2018/12/14 10:29 p.m.12 views

Design/Logic Flaw

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

4CVSS4.5AI score0.00779EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/12/14 10:29 p.m.19 views

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

7.2CVSS7.2AI score0.01507EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/14 10:29 p.m.4 views

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

7.2CVSS6.1AI score0.01507EPSS
SaveExploits0References1
Prion
Prion
added 2018/12/14 10:29 p.m.17 views

Code injection

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

4CVSS4.5AI score0.00978EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2018/12/14 10:29 p.m.12 views

Code injection

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

6.5CVSS7.1AI score0.01507EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2018/12/14 10:29 p.m.5 views

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

4.3CVSS5.8AI score0.00779EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/14 10:29 p.m.18 views

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

4.3CVSS4.5AI score0.00978EPSS
SaveExploits0References1
OSV
OSV
added 2018/12/14 10:29 p.m.5 views

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

4.3CVSS5.8AI score0.00978EPSS
SaveExploits0References1
NVD
NVD
added 2018/12/14 10:29 p.m.16 views

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

4.3CVSS4.5AI score0.00779EPSS
SaveExploits0References1
CVE
CVE
added 2018/12/14 10:0 p.m.43 views

CVE-2018-20154

CVE-2018-20154 affects the WordPress WP Maintenance Mode plugin prior to 2.0.7. The vulnerability allows remote authenticated users to disclose all subscriber email addresses, constituting an information-disclosure flaw in the plugin’s handling of subscriber data. The impact is confined to partia...

4.3CVSS5AI score0.00978EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/12/14 10:0 p.m.47 views

CVE-2018-20156

CVE-2018-20156 affects the WordPress WP Maintenance Mode plugin (before 2.0.7). A remote authenticated site administrator can execute arbitrary PHP code across a multisite network. Public sources confirm this plugin version before 2.0.7 is vulnerable; exploitation status is not detailed in the pr...

7.2CVSS7.1AI score0.01507EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/12/14 10:0 p.m.22 views

CVE-2018-20156

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network...

7.2AI score0.01507EPSS
SaveExploits0References1
CVE
CVE
added 2018/12/14 10:0 p.m.42 views

CVE-2018-20155

CVE-2018-20155 affects the WordPress WP Maintenance Mode plugin prior to version 2.0.7. The vulnerability allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings, exposing a flaw in authorization for configuration changes. The issue is doc...

4.3CVSS4.9AI score0.00779EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/12/14 10:0 p.m.24 views

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings...

5AI score0.00779EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/12/14 10:0 p.m.22 views

CVE-2018-20154

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses...

5.1AI score0.00978EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2018/12/13 8:40 a.m.27 views

Security Bulletin: A security vulnerability has been identified in IBM DB2 shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise (CVE-2018-1897)

Summary IBM DB2 is shipped with IBM Maximo APM - Predictive Maintenance Insights On-Premise formerly IBM IoT Predictive Maintenance and Optimization. Information about some security vulnerabilities affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the...

8.4CVSS2AI score0.00559EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/12/13 8:40 a.m.21 views

Security Bulletin: Security vulnerabilities have been identified in IBM Db2 shipped with Predictive Maintenance and Quality (CVE-2018-1897, CVE-2018-1723)

Summary IBM DB2 is shipped with Predictive Maintenance and Quality. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

8.4CVSS2.4AI score0.00559EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder