PT-2019-15025 · WordPress · Igniteup Plugin

Publicado 2019-11-12 · Atualizado 2019-11-12 · CVE-2019-17237

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress

Description The issue allows CSRF in the igniteup plugin for WordPress.

Recommendations For versions through 3.4, update to a version that contains a fix for this issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-17237

Produtos afetados

Igniteup Plugin

Referências · 4

• 🔥 https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• https://wordpress.org/plugins/igniteup/#developers · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-17237 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17237 · Aviso do Fabricante