PT-2019-15025 · WordPress · Igniteup Plugin

Published 2019-11-12 · Updated 2019-11-12 · CVE-2019-17237

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions igniteup plugin versions through 3.4 for WordPress

Description The issue allows CSRF in the igniteup plugin for WordPress.

Recommendations For versions through 3.4, update to a version that contains a fix for this issue.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-17237

Affected Products

Igniteup Plugin

References · 4

• 🔥 https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin · Exploit
• https://wordpress.org/plugins/igniteup/#developers · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-17237 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17237 · Vendor Advisory