CVE Daily

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenti...

Medium CVSS 4.3

Overview

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

CWE: CWE-862 Published: 2018-12-14T22:29:00.273
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.3 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags