Known CVE

WordPress Under Construction <1.19 - Cross-Site Scripting

WordPress Under Construction plugin before 1.19 contains a cross-site scripting vulnerability. The plugin echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.php file on certain configurations, including Apache+modPHP.

CVE-2021-39320

Medium2021CVSS 6.1CWE-79

cve2021 · wp-plugin · wpscan · wordpress · wp · xss · authenticated · underconstruction_project

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website