Approved changes feed: RSS · Atom

cpe:2.3:a:florent_maillefaud:wp_maintenance:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFlorent Maillefaud (09169917-634b-550d-934a-3e388236a4b6)
ProductWp Maintenance (c2495d9d-615e-55d5-b66f-6cffe2be5907)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-47683 vulnerable 2026-06-08 07:27:14.719136 WordPress WP Maintenance plugin <= 6.1.9.7 - PHP Object Injection Vulnerability
HIGH (7.2)
Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance wp-maintenance allows Object Injection.This issue affects WP Maintenance: from n/a through <= 6.1.9.7.
Published: 2025-05-07T14:20:54.652Z
Updated: 2026-04-28T16:12:49.812Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47769 vulnerable 2026-06-08 06:14:25.546543 WordPress WP Maintenance plugin <= 6.1.3 - IP Filtering Bypass vulnerability
LOW (3.7)
Authentication Bypass by Spoofing vulnerability in WP Maintenance allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Maintenance: from n/a through 6.1.3.
Published: 2024-06-04T10:06:50.700Z
Updated: 2026-04-28T16:08:51.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36828 vulnerable 2026-06-08 05:32:52.572686 WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
MEDIUM (4.8)
Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.
Published: 2022-04-15T16:24:47.084Z
Updated: 2026-04-28T16:07:34.253Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.