Vendor/product archive

yithemes / yith_maintenance_mode CVEs

Beta · best-effort

3 CVEs tagged to yithemes / yith_maintenance_mode — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to yithemes vendor archive

CVE-2021-36845

Published Sep 27, 2021

Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8, there are 46 vulnerable parameters that wer…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-36841

Published Sep 27, 2021

Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter &yith_maintenance_newsletter_subm…

CVSS 6.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-9429

Published Sep 26, 2019

The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mode panel_page parameter.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1