CVE-2021-36829: WordPress Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36829?
The severity of CVE-2021-36829 is medium with a CVSS score of 4.8.
Which software version is affected by CVE-2021-36829?
The MyThemeShop Launcher plugin version 1.0.11 and below for WordPress is affected by CVE-2021-36829.
What is the CWE number associated with CVE-2021-36829?
The CWE number associated with CVE-2021-36829 is 79.
How can I fix the authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher plugin?
To fix the authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher plugin, update to version 1.0.12 or higher.
Where can I find more information about CVE-2021-36829?
You can find more information about CVE-2021-36829 at the following references: [Patchstack](https://patchstack.com/database/vulnerability/launcher/wordpress-launcher-coming-soon-maintenance-mode-plugin-1-0-11-authenticated-stored-cross-site-scripting-xss-vulnerability) and [WordPress.org](https://wordpress.org/plugins/launcher/).