Designmodo Wp Maintenance Mode vulnerabilities
3 vulnerabilities
Known vulnerabilities in Designmodo Wp Maintenance Mode, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-20155designmodowp_maintenance_mode+1
EPSS score0.78%
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.CVE-2018-20156designmodowp_maintenance_mode+1EPSS score1.51%
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.CVE-2018-20154designmodowp_maintenance_mode+1EPSS score0.98%
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.