CVE-2019-17236

Description

References

• blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• wordpress.org/plugins/igniteup · Release Notes

Weitere Schwachstellen in igniteup

• CVE-2022-0898MITTEL 5.4The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_htm…
• CVE-2019-17237HOCH 8.8includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
• CVE-2019-17235MITTEL 5.3includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.
• CVE-2019-17234HOCH 7.5includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.