CVE-2023-6751: Hostinger

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The Hostinger plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the function publish_website in all versions up to, and including, 1.9.7. This makes it possible for unauthenticated attackers to enable and disable maintenance mode.

Affected products

• Hostinger Hostinger: up to and including 1.9.7

Published 2024-01-11. Last modified 2026-06-17.