WordPress Site Offline or Coming Soon plugin <= 1.6.6 - Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability

2022-06-0600:00:00

Daniel Ruf

patchstack.com

wordpress

cross-site scripting

cross-site request forgery

EPSS

0.001

Percentile

40.2%

JSON

Stored Cross-Site Scripting (XSS) via Cross-Site Request Forgery (CSRF) vulnerability discovered by Daniel Ruf in WordPress Site Offline or Coming Soon plugin (versions <= 1.6.6).

Solution

Deactivate and delete. This plugin has been closed as of May 5, 2022 and is not available for download. This closure is temporary, pending a full review.