Vulnerabilities (CVE)

Filtered by vendor Designmodo
Angry Yack Logo
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-40700 12 Agence-press, Arcstone, Deano and 9 more 15 Css Adder, Amo For Wp - Membership Management, Amp Toolbox and 12 more 2024-11-21 N/A 8.2 HIGH
Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. WordPress Page Builder – Qards, Philip M ...

Show More

CVE-2018-20156 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 6.5 MEDIUM 7.2 HIGH
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
CVE-2018-20155 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
CVE-2018-20154 1 Designmodo 1 Wp Maintenance Mode 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
CVE-2017-18598 1 Designmodo 1 Qards 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.