Wp Maintenance Project Wp Maintenance — known CVE vulnerabilities

Every CVE whose affected-product data names Wp Maintenance Project Wp Maintenance, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-19979 — CVSS 8.8 (high): A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject…
• CVE-2021-36828 — CVSS 4.8 (medium): Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
• CVE-2022-30536 — CVSS 3.4 (low): Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at WordPress.