PT-2025-43019 · WordPress · Ns Maintenance Mode For Wp

Khaled Alenazi · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-10638

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions NS Maintenance Mode for WP WordPress plugin versions through 1.3.1

Description The NS Maintenance Mode for WP WordPress plugin does not properly restrict access to its subscriber export function. This allows unauthenticated attackers to obtain a list of subscribers, including their names and email addresses. The affected function allows downloading a list of a site's subscribers.

Recommendations Update the NS Maintenance Mode for WP WordPress plugin to a version later than 1.3.1.

Exploit

Fix

Related Identifiers

CVE-2025-10638

Affected Products

Ns Maintenance Mode For Wp

References · 3

• 🔥 https://wpscan.com/vulnerability/1998a079-d986-47fe-907f-d4d295b06603 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10638 · Security Note
• https://t.me/cveNotify/139888 · Telegram Post