555 matches found
CVE-2026-111034
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not check that the user is allowed to browse content before returning post titles from one of its AJAX actions, allowing any authenticated user, such as a subscriber, to list the titles of published entries of any post...
CVE-2026-111033
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks when saving countdown data on post save, and its output-sanitization allowlist permits script tags, allowing users with Author-level access and above to store arbitrary web script...
CVE-2026-111034
The Countdown, Coming Soon, Maintenance – Countdown & Clock WordPress plugin (versions up to and including 3.0.8 ) is vulnerable to a non-public post title disclosure via the select2Ajax AJAX action. The plugin fails to verify if a user is authorized to browse content before returning post titles...
CVE-2026-111033
The Countdown, Coming Soon, Maintenance – Countdown & Clock WordPress plugin, affecting versions up to and including 3.0.8 , is vulnerable to a Stored XSS vulnerability. The issue exists because the plugin fails to perform adequate authorization or nonce checks when saving countdown data during t...
WordPress Countdown, Coming Soon, Maintenance plugin <= 3.0.8 - Author+ Stored XSS vulnerability
Author+ Stored XSS vulnerability discovered by Huseyn in WordPress Plugin Countdown & Clock versions = 3.0.8...
EUVD-2026-125853
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks when saving countdown data on post save, and its output-sanitization allowlist permits script tags, allowing users with Author-level access and above to store arbitrary web script...
CVE-2026-111033 Countdown, Coming Soon, Maintenance – Countdown & Clock <= 3.0.8 - Author+ Stored XSS via savePost
The Countdown, Coming Soon, Maintenance WordPress plugin through 3.0.8 does not perform authorization or nonce checks when saving countdown data on post save, and its output-sanitization allowlist permits script tags, allowing users with Author-level access and above to store arbitrary web script...
WordPress Countdown, Coming Soon, Maintenance plugin <= 3.0.8 - Subscriber+ Non-Public Post Title Disclosure vulnerability
Subscriber+ Non-Public Post Title Disclosure vulnerability discovered by Huseyn in WordPress Plugin Countdown & Clock versions = 3.0.8...
Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access
The plugin does not restrict access to published and non protected posts/pages when the maintenance mode is enabled, allowing unauthenticated users to access them. id: CVE-2023-1263 info: name: Coming Soon & Maintenance 4.1.7 - Unauthenticated Post/Page Access author: r3Y3r53 severity: medium...
msprobe
msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...
CVE-2023-46615
CVE-2023-46615 KD Coming Soon = 1.7 - Unauthenticated PHP Object Injection via cetitle Description: The KD Coming Soon plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7 via deserialization of untrusted input cetitle in the vulnerable kdcemailer...
CVE-2023-2033
CVE-2023-2033 coming soon...
CVE-2020-36730
CVE-2020-36730 CMP - Coming Soon & Maintenance 3.8.2 - Improper Access Controls on AJAX Calls Subscriber+ Description: Some of the AJAX calls from the plugin do not properly check for capabilities and CSRF tokens, leading to issues such as arbitrary post read, subscribers list export and plugin...
WordPress CMP – Coming Soon & Maintenance plugin 4.1.19-4.1.20 - Unauthenticated Maintenance Mode Bypass vulnerability
Unauthenticated Maintenance Mode Bypass vulnerability discovered by Sanjeev Kumar in WordPress Plugin CMP – Coming Soon & Maintenance versions 4.1.19-4.1.20...
CVE-2026-101138
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...
CVE-2026-101138 CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...
CVE-2026-101138 CMP - Coming Soon & Maintenance 4.1.19 - 4.1.20 - Unauthenticated Maintenance Mode Bypass via Custom URL Whitelist
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...
CVE-2026-101138
The CMP – Coming Soon & Maintenance WordPress plugin, in versions 4.1.19 through 4.1.20 , is vulnerable to an unauthenticated maintenance mode bypass. The flaw occurs because the plugin fails to correctly apply maintenance mode restrictions to pages included in a whitelist via manually entered UR...
EUVD-2026-107141
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...
PT-2026-120498
The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, allowing unauthenticated visitors to view the content of those pages while maintenance mode is active...