Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2018-20156 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 N/A
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
CVE-2018-20155 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 N/A
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
CVE-2018-20154 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 N/A
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
CVE-2017-18598 1 Designmodo 1 Qards 2024-11-21 6.1 Medium
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.