CVE-2019-17236

Description

References

• blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• wordpress.org/plugins/igniteup · Release Notes

igniteup 的其他漏洞

• CVE-2022-0898中危 5.4The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_htm…
• CVE-2019-17237高危 8.8includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.
• CVE-2019-17235中危 5.3includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.
• CVE-2019-17234高危 7.5includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.