Vulnerabilities > Designmodo > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-09-10 | CVE-2017-18598 | Cross-site Scripting vulnerability in Designmodo Qards The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php. | 6.1 |
| 2018-12-14 | CVE-2018-20155 | Missing Authorization vulnerability in Designmodo WP Maintenance Mode The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated subscriber users to bypass intended access restrictions on changes to plugin settings. | 4.3 |
| 2018-12-14 | CVE-2018-20154 | Information Exposure vulnerability in Designmodo WP Maintenance Mode The WP Maintenance Mode plugin before 2.0.7 for WordPress allows remote authenticated users to discover all subscriber e-mail addresses. | 4.3 |