includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.
References
Link | Resource |
---|---|
https://blog.nintechnet.com/multiple-vulnerabilities-in-wordpress-igniteup-coming-soon-and-maintenance-mode-plugin/ | Exploit Third Party Advisory |
https://wordpress.org/plugins/igniteup/#developers | Release Notes Vendor Advisory |
Configurations
History
No history.
Information
Published : 2019-11-12 17:15
Updated : 2024-02-04 20:39
NVD link : CVE-2019-17234
Mitre link : CVE-2019-17234
CVE.ORG link : CVE-2019-17234
JSON object : View
Products Affected
getigniteup
- igniteup
CWE
CWE-306
Missing Authentication for Critical Function