Designmodo: >> Wp Maintenance Mode >> 1.5.2 Security Vulnerabilities
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
CVSS Score
4.3
EPSS Score
0.002
Published
2018-12-14
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
CVSS Score
4.3
EPSS Score
0.001
Published
2018-12-14
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
CVSS Score
7.2
EPSS Score
0.016
Published
2018-12-14