WordPress Plugin Vulnerabilities
IgniteUp < 3.4.1 - Multiple Issues
Description
All issues can be triggered by unauthenticated users:
- Arbitrary File Deletion
- HTML injection & CSRF in email messages
- Stored Cross-Site Scripting
- Disclosure of subscribers' email address
- Arbitrary subscriber deletion
- Arbitrary plugin’s template switch
Affects Plugins
Fixed in 3.4.1 References
Miscellaneous
Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
Timeline
Publicly Published
2019-11-10 (about 6 years ago)
Added
2019-11-10 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)
WPScan 