CVE-2020-6166

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...

CVE-2020-6166

The Minimal Coming Soon & Maintenance Mode WordPress plugin (versions through 2.15 ) contains a logic flaw that allows authenticated users with subscriber level access or higher to perform unauthorized actions. Specifically, an attacker can export plugin settings as a .txt file or modify the main...