CVE-2022-1580 Site Offline < 1.5.3 - Access Bypass

2022-09-1914:00:47

CWE-639

WPScan

www.cve.org

cve-2022-1580

wordpress plugin

access bypass

maintenance mode

AI Score

4.9

Confidence

High

EPSS

0.001

Percentile

30.1%

JSON

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL’s query string would bypass the plugin’s main feature.

CNA Affected

[
  {
    "product": "Site Offline Or Coming Soon Or Maintenance Mode",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.5.3",
        "status": "affected",
        "version": "1.5.3",
        "versionType": "custom"
      }
    ]
  }
]