Description
A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with resultant XSS.
High · 8.8
CVE-2019-19979
EUVD-2019-9567GHSA-6rmj-vqg9-w2qx
A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject ma…
Published Dec 26, 2019 · Updated Aug 5, 2024 · Assigned by mitre