https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:31:38.579783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6751 CVE-2023-6751 — Hostinger <= 1.9.7 - Missing Authorization to Maintenance Mode Activation 2026-10-06T11:31:38.599422+00:00

Affected: Hostinger Tools

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7. This makes it possible for unauthenticated attackers to enable and disable maintenance mode.