CVE-2019-17235: includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.

medium Affects igniteup (WordPress plugin). Feed 2026.10.29.1, updated 2026-10-28; published 2019-11-12; advisory modified 2026-06-17.

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.

Package: igniteup (WordPress plugin) WordPress
Affected versions: <=3.4
Fixed in: no fix recorded
Severity: medium CVSS 5.3
Exploitation: not on CISA KEV · EPSS 1% (72.3th percentile)
Published: 2019-11-12
Source: nvd

References

CWE-306

NVD record igniteup (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

Related advisories

CVE-2019-17234 high includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress al same package: igniteup (WordPress plugin)
CVE-2019-17236 medium includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is same package: igniteup (WordPress plugin)
CVE-2019-17237 high includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress al same package: igniteup (WordPress plugin)
CVE-2022-0898 medium The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when same package: igniteup (WordPress plugin)
CVE-2021-25094 high The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior same weakness: CWE-306
CVE-2024-10924 critical The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulner same weakness: CWE-306