Description
Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Florent Maillefaud | WP Maintenance | ≤ 6.0.7 | — |
Medium · 4.8
CVE-2021-36828
EUVD-2021-23404GHSA-5wg3-2hmj-xfr7
WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Apr 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack