Vulnerabilities > Designmodo

DATE CVE VULNERABILITY TITLE RISK
2024-01-19 CVE-2022-40700 Server-Side Request Forgery (SSRF) vulnerability in Montonio Montonio for WooCommerce, Wpopal Wpopal Core Features, AMO for WP – Membership Management ArcStone wp-amo, Long Watch Studio WooVirtualWallet – A virtual wallet for WooCommerce, Long Watch Studio WooVIP – Membership plugin for WordPress and WooCommerce, Long Watch Studio WooSupply – Suppliers, Supply Orders and Stock Management, Squidesma Theme Minifier, Paul Clark Styles styles, Designmodo Inc. 9.8
9.8
2019-09-10 CVE-2017-18598 Cross-site Scripting vulnerability in Designmodo Qards
The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.
network
low complexity
designmodo CWE-79
6.1
6.1
2018-12-14 CVE-2018-20156 Improper Input Validation vulnerability in Designmodo WP Maintenance Mode
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated "site administrator" users to execute arbitrary PHP code throughout a multisite network.
network
low complexity
designmodo CWE-20
7.2
7.2
2018-12-14 CVE-2018-20155 Missing Authorization vulnerability in Designmodo WP Maintenance Mode
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings.
network
low complexity
designmodo CWE-862
4.3
4.3
2018-12-14 CVE-2018-20154 Information Exposure vulnerability in Designmodo WP Maintenance Mode
The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses.
network
low complexity
designmodo CWE-200
4.3
4.3