Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
getigniteup igniteup vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2022-0898
The IgniteUp WordPress plugin up to and including 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
Getigniteup Igniteup
5.3
CVSSv3
CVE-2019-17235
includes/class-coming-soon-creator.php in the igniteup plugin up to and including 3.4 for WordPress allows information disclosure.
Getigniteup Igniteup
6.1
CVSSv3
CVE-2019-17236
includes/class-coming-soon-creator.php in the igniteup plugin up to and including 3.4 for WordPress is vulnerable to stored XSS.
Getigniteup Igniteup
8.8
CVSSv3
CVE-2019-17237
includes/class-coming-soon-creator.php in the igniteup plugin up to and including 3.4 for WordPress allows CSRF.
Getigniteup Igniteup
7.5
CVSSv3
CVE-2019-17234
includes/class-coming-soon-creator.php in the igniteup plugin up to and including 3.4 for WordPress allows unauthenticated arbitrary file deletion.
Getigniteup Igniteup
2 Github repositories
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654
CVE-2024-2757
authentication bypass
CVE-2024-3194
CVE-2024-33640
CVE-2024-21111
dos
insecure direct object reference
CVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started