WordPress Maintenance Mode Plugin <= 1.8.7 - CSRF

2013-04-2200:00:00

N/A

patchstack.com

0.001 Low

EPSS

Percentile

35.5%

Because of this vulnerability, the attackers can hijack the authentication of arbitrary users for requests that modify this plugin’s settings.

Solution

           Update the plugin.

CPENameOperatorVersion
maintenance modele1.8.7

CPE	Name	Operator	Version
	maintenance mode	le	1.8.7

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-3250

0.001 Low

EPSS

Percentile

35.5%

Related for PATCHSTACK:345D57CBF3E7B23B3541A799F5EB22BA