YithemesYith Maintenance Mode
3 matches found
CVE-2015-9429
CVE-2015-9429 concerns the WordPress plugin YITH Maintenance Mode (before 1.2.0). The issue is a CSRF that leads to an XSS via the parameter panel_page in the page wp-admin/themes.php?page=yith-maintenance-mode. Affected products/versions: WordPress plugin versions prior to 1.2.0. Documented impa...
6.5CVSS6.2AI score0.00867EPSS
SaveWeb
CVE-2021-36841
Affected software : YITH Maintenance Mode plugin for WordPress (versions ≤ 1.3.7). Vulnerability : Authenticated Stored Cross-Site Scripting (XSS) in the vulnerable parameter &yith_maintenance_newsletter_submit_label , with possibility of exploitation even if unfiltered HTML is disallowed by Word...
6.9CVSS5.2AI score0.0063EPSS
Save