CVE-2019-17235

概要

参考情報

• blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• wordpress.org/plugins/igniteup · Release Notes

igniteup のその他の脆弱性

• CVE-2022-0898中 5.4The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_htm…
• CVE-2019-17237高 8.8includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
• CVE-2019-17236中 6.1includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.
• CVE-2019-17234高 7.5includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.