CVE-2020-35773: freehtmldesigns site offline – CVSS 8.8 · Watchpost

← All vulnerabilities

CVE-2020-35773

높음 8.8CVE-2020-35773 · Published 29/12/2020 · updated 17/06/2026

요약

CVE-2020-35773은(는) site offline (freehtmldesigns)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.98%, 전체 취약점의 62.5%보다 높음.
조치: 1.4.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
site offline freehtmldesigns	`< 1.4.4`	`1.4.4`

Description

The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF.

References

advisory.checkmarx.net/advisory/CX-2020-4292 · Exploit
developer.wordpress.org/reference/functions/wp_create_nonce · Third Party Advisory
developer.wordpress.org/reference/functions/wp_verify_nonce · Third Party Advisory
plugins.trac.wordpress.org/changeset/2445009 · Patch
wordpress.org/plugins/site-offline · Product

site offline의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free