CVE-2020-6168

Опубликовано: 09 янв. 2020

Источник: nvd

CVSS3: 7.6

CVSS2: 6.5

EPSS Низкий

Описание

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings (impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting).

Ссылки

https://wordpress.org/plugins/minimal-coming-soon-maintenance-mode/#developers
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/10008
Third Party Advisory
https://www.wordfence.com/blog/2020/01/multiple-vulnerabilities-patched-in-minimal-coming-soon-maintenance-mode-coming-soon-page-plugin/
Exploit
Third Party Advisory
https://wordpress.org/plugins/minimal-coming-soon-maintenance-mode/#developers
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/10008
Third Party Advisory
https://www.wordfence.com/blog/2020/01/multiple-vulnerabilities-patched-in-minimal-coming-soon-maintenance-mode-coming-soon-page-plugin/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:webfactoryltd:minimal_coming_soon_\&_maintenance_mode:*:*:*:*:*:wordpress:*:*

Версия до 2.10 (включая)

EPSS

Процентиль: 79%

0.01239

Низкий

7.6 High

CVSS3

7.6 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

GHSA-6xpf-466x-v7vx

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01239

Низкий

7.6 High

CVSS3

7.6 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-862