VendorsWP Maintenance Projectwp_maintenanceany version
Vulnerabilities

WP Maintenance Project WP Maintenance any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2019-19979
A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.
Published 2019-12-26 · Modified
8.8EPSS 0.006
CVE-2022-30536
WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published 2022-07-21 · Modified
4.8EPSS 0.007
CVE-2021-36828
WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published 2022-04-15 · Modified
4.8EPSS 0.005