CVE-2020-35773
High
Description
The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF.
SeverityHigh
CVSS8.8
Exploit probability—
ProductFreehtmldesigns Site Offline
PublishedDec 29, 2020
First seenDec 29, 2020
How to fix
Update
- freehtmldesigns site_offline1.4.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freehtmldesigns site_offline | v < 1.4.4 | 1.4.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.