medium5.3
CVE-2025-10638
The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to downl…
Impact
The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address
Affected products
| Product | Affected versions |
|---|---|
| NS Maintenance Mode For WP WordPress Plugin | through 1.3.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.