Wp Maintenance Security Vulnerabilities and Issues — Wp Maintenance CVE List

Wp Maintenance ProjectWp Maintenance

3 matches found

CVE•added 2022/04/15 4:24 p.m.•85 views

CVE-2021-36828

CVE-2021-36828 affects the WordPress WP Maintenance plugin, with an authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in versions up to 6.0.7. The issue involves multiple inputs not being properly sanitized, enabling XSS by privileged users. Several sources (NVD/NIST, CVE rec...

4.8CVSS4.9AI score0.00505EPSS

CVE•added 2019/12/26 2:26 a.m.•82 views

CVE-2019-19979

The CVE concerns the WordPress WP Maintenance plugin prior to version 5.0.6. A CSRF vulnerability allowed attackers to enable the plugin’s maintenance mode and inject malicious code affecting site visitors, enabling a stored XSS path when maintenance settings were manipulated. Root cause cited ac...

8.8CVSS8.5AI score0.0063EPSS

Web

CVE•added 2022/07/21 5:22 p.m.•76 views

CVE-2022-30536

CVE-2022-30536 affects WordPress WP Maintenance plugin = 6.0.8 (or later) per Patchstack guidance.

4.8CVSS4.3AI score0.00612EPSS