Yithemes Yith Maintenance Mode — known CVE vulnerabilities

Every CVE whose affected-product data names Yithemes Yith Maintenance Mode, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-36841 — CVSS 6.9 (medium): Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable…
• CVE-2021-36845 — CVSS 6.9 (medium): Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.8…
• CVE-2015-9429 — CVSS 6.5 (medium): The yith-maintenance-mode plugin before 1.2.0 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=yith-maintenance-mo…