Lucene search
PRIOn knowledge basePRION:CVE-2024-1075HistoryFeb 05, 2024 - 10:16 p.m.
Information disclosure
2024-02-0522:16:00
PRIOn knowledge base
www.prio-n.com
6
information disclosure
maintenance mode bypass
unauthenticated attackers
vulnerable versions
The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request path. This makes it possible for unauthenticated attackers to bypass maintenance mode and view pages that should be hidden.
| CPE | Name | Operator | Version |
|---|---|---|---|
| minimal_coming_soon_\\&_maintenance_mode | le | 2.37 |
References
plugins.trac.wordpress.org/browser/minimal-coming-soon-maintenance-mode/trunk/framework/public/init.php
plugins.trac.wordpress.org/changeset/3031149/minimal-coming-soon-maintenance-mode/trunk/framework/public/init.php
www.wordfence.com/threat-intel/vulnerabilities/id/78203b98-15bc-4d8e-9278-c472b518be07?source=cve
Related
cve
cve
CVE-2024-1075
2024-02-05 22:16:07
cvelist
cvelist
CVE-2024-1075
2024-02-05 21:21:50
wpvulndb
wpvulndb
openvas
openvas
nvd
nvd
CVE-2024-1075
2024-02-05 22:16:07
wordfence
wordfence