Vulnerabilities and Security Researches

WP Maintenance, CVE-2019-19979

CVE, Research URL: CVE-2019-19979
Home page URL: Security reports for WP Maintenance
Application: WP Maintenance
Published on: Dec 26, 2019
Research Description: A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.
Affected versions: Min -, max 5.0.7.
Status: vulnerable