Unrated severityNVD Advisory· Published Dec 26, 2019· Updated Aug 5, 2024

CVE-2019-19979

Description

A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.

Affected products

WordPress/WP Maintenancedescription
WordPress/Wp Maintenancellm-fuzzy
Range: <5.0.6
Package: https://wordpress.org/plugins/wp-maintenance

Patches

Vulnerability mechanics

References

wpvulndb.com/vulnerabilities/9954mitrex_refsource_MISC
www.wordfence.com/blog/2019/11/high-severity-vulnerability-patched-in-wp-maintenance-plugin/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000