Skip to content
Sign in
5.3 Medium

CVE-2025-10638 The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function…

Description

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address

Affected products and versions

Product Affected versions Fixed in
NS Maintenance Mode for WP 1.3 earliest → 1.3.1 No fix stated

Other CVEs of NS Maintenance Mode for WP

The 2 CVEs of NS Maintenance Mode for WP →
CVE-2025-10636 The NS Maintenance Mode for WP WordPress plugin through 1.3.1 does not sanitise and escape some of its settings, which… 3.5 Low
Track this CVE