Designmodo Wp Maintenance Mode — known CVE vulnerabilities

Every CVE whose affected-product data names Designmodo Wp Maintenance Mode, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-20156 — CVSS 7.2 (high): The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP…
• CVE-2018-20154 — CVSS 4.3 (medium): The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
• CVE-2018-20155 — CVSS 4.3 (medium): The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access…