WordPress Plugin Vulnerabilities

WP Maintenance Mode <= 2.0.6 - Subscriber Information Disclosure

Description

The WP Maintenance Mode WordPress plugin was affected by a Subscriber Information Disclosure security vulnerability.

Affects Plugins

Plugin icon
wp-maintenance-mode
Fixed in 2.0.7

References

CVE
CVE-2018-20154
URL
https://www.wordfence.com/blog/2016/07/3-vulnerabilities-wp-maintenance-mode/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
a20ee41a-5d59-45ed-9680-05ef2e687469

Timeline

Publicly Published
2016-07-06 (about 9 years ago)
Added
2016-07-11 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-02-17
Title
Brevo < 3.3.1 - Unauthenticated Authorization Bypass via Type Juggling
Published
2021-08-05
Title
User Rights Access Manager < 1.0.8 - Access Restriction Bypass
Published
2016-11-10
Title
W3 Total Cache < 0.9.5 - Weak Validation of Amazon SNS Push Messages
Published
2018-12-13
Title
WordPress <= 5.0 - Authenticated Post Type Bypass
Published
2026-03-27
Title
SureForms < 2.6.0 - Unauthenticated Payment Amount Validation Bypass via 'form_id'