CVE-2019-17235

Description

References

• blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• wordpress.org/plugins/igniteup · Release Notes

Altre vulnerabilità di igniteup

• CVE-2022-0898MEDIO 5.4The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_htm…
• CVE-2019-17237ALTO 8.8includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
• CVE-2019-17236MEDIO 6.1includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.
• CVE-2019-17234ALTO 7.5includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.