WordPress plugin

IgniteUp – Coming Soon and Maintenance Mode security & vulnerabilities

Q: Does IgniteUp – Coming Soon and Maintenance Mode have known vulnerabilities?

Yes. VulnCrest Radar lists 5 known vulnerabilities in IgniteUp – Coming Soon and Maintenance Mode: 2 high, 3 medium. None are known to affect version null.

Q: How do I check which version of IgniteUp – Coming Soon and Maintenance Mode I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent IgniteUp – Coming Soon and Maintenance Mode vulnerability?

CVE-2022-0898, published Apr 13, 2022: IgniteUp – Coming Soon and Maintenance Mode <= 3.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.5).

Q: Is any IgniteUp – Coming Soon and Maintenance Mode vulnerability listed in CISA KEV?

No. None of the known IgniteUp – Coming Soon and Maintenance Mode vulnerabilities is currently listed in the CISA KEV catalog.

igniteup— active installsLast vulnerability Apr 13, 2022

No known unpatched vulnerabilities in the latest version

All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

5Known vulnerabilities

Critical0
High2
Medium3
Low0

Vulnerabilities per year

All IgniteUp – Coming Soon and Maintenance Mode vulnerabilities

IgniteUp – Coming Soon and Maintenance Mode vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.5	Authenticated (Admin+) Stored Cross-Site Scripting ≤3.4.1Update to 3.4.2	CVE-2022-0898	Apr 13, 2022
Medium6.1	Stored Cross-Site Scripting <3.4.1Update to 3.4.1	CVE-2019-17236	Nov 10, 2019
High7.5	Unauthenticated Arbitrary File Deletion <3.4.1Update to 3.4.1	CVE-2019-17234	Nov 10, 2019
High8.8	Cross-Site Request Forgery ≤3.4.0Update to 3.4.1	CVE-2019-17237	Nov 10, 2019
Medium5.3	Information Disclosure ≤3.4.0Update to 3.4.1	CVE-2019-17235	Nov 10, 2019

Medium5.5
Authenticated (Admin+) Stored Cross-Site Scripting
≤3.4.1Update to 3.4.2
CVE-2022-0898Apr 13, 2022
Medium6.1
Stored Cross-Site Scripting
<3.4.1Update to 3.4.1
CVE-2019-17236Nov 10, 2019
High7.5
Unauthenticated Arbitrary File Deletion
<3.4.1Update to 3.4.1
CVE-2019-17234Nov 10, 2019
High8.8
Cross-Site Request Forgery
≤3.4.0Update to 3.4.1
CVE-2019-17237Nov 10, 2019
Medium5.3
Information Disclosure
≤3.4.0Update to 3.4.1
CVE-2019-17235Nov 10, 2019

IgniteUp – Coming Soon and Maintenance Mode: common questions

Does IgniteUp – Coming Soon and Maintenance Mode have known vulnerabilities?

Yes. VulnCrest Radar lists 5 known vulnerabilities in IgniteUp – Coming Soon and Maintenance Mode: 2 high, 3 medium. None are known to affect version null.

How do I check which version of IgniteUp – Coming Soon and Maintenance Mode I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent IgniteUp – Coming Soon and Maintenance Mode vulnerability?

CVE-2022-0898, published Apr 13, 2022: IgniteUp – Coming Soon and Maintenance Mode <= 3.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting. Severity: Medium (CVSS 5.5).

Is any IgniteUp – Coming Soon and Maintenance Mode vulnerability listed in CISA KEV?

No. None of the known IgniteUp – Coming Soon and Maintenance Mode vulnerabilities is currently listed in the CISA KEV catalog.