NetSight
medium4.3

CVE-2018-20155

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plu…

Impact

The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.

Affected products

VendorProductAffected versions
DesignmodoWp Maintenance Mode
before 2.0.7

Weakness classification

References