Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-10638

NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Subscribers Export

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown NS Maintenance Mode for WP

Default version status: unknown

  • 0 to ≤ 1.3.1affected

References