The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 22 Oct 2025 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The NS Maintenance Mode for WP WordPress plugin through 1.3.1 lacks authorization in its subscriber export function allowing unauthenticated attackers to download a list of a site's subscribers containing their name and email address | |
| Title | NS Maintenance Mode for WP <= 1.3.1 - Unauthenticated Subscribers Export | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2025-10-22T06:00:02.379Z
Reserved: 2025-09-17T13:34:17.993Z
Link: CVE-2025-10638
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-10-22T06:15:30.593
Modified: 2025-10-22T06:15:30.593
Link: CVE-2025-10638
Redhat
No data.
OpenCVE Enrichment
No data.