PT-2025-44373 · WordPress · Ns Maintenance Mode For Wp

Bob Matyas · CVE-2025-10636 · Published 2025-10-30 · Updated 2025-10-30

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NS Maintenance Mode for WP WordPress plugin versions through 1.3.1

Description The plugin does not properly sanitize and escape certain settings, potentially allowing users with high privileges, such as administrators, to carry out Stored Cross-Site Scripting (XSS) attacks. This can occur even when the unfiltered html capability is not permitted, for example, in a multisite configuration. The issue involves insufficient input validation, which could allow malicious scripts to be stored and executed within the application.

Recommendations Update NS Maintenance Mode for WP WordPress plugin to a version later than 1.3.1.

Exploit

Fix

Related Identifiers

CVE-2025-10636

Affected Products

Ns Maintenance Mode For Wp

References · 6

• 🔥 https://wpscan.com/vulnerability/a1ab1d82-108e-4f66-9d06-5036cde9678a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10636 · Security Note
• https://twitter.com/CVEnew/status/1983788741987541123 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1983786474093826454 · Twitter Post
• https://t.me/CVEtracker/36150 · Telegram Post
• https://t.me/cveNotify/140953 · Telegram Post