CVE-2020-6166

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...

Design/Logic Flaw

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...

CVE-2020-6168

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting...

Cross site scripting

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting...

CVE-2020-6168

The Minimal Coming Soon & Maintenance Mode WordPress plugin (versions through 2.10 ) contains a flaw that allows authenticated users with subscriber permissions or higher to enable and disable maintenance-mode settings. This vulnerability impacts the availability , confidentiality , and integrity...

CVE-2020-6168

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting...

CVE-2020-6166

The Minimal Coming Soon & Maintenance Mode WordPress plugin (versions through 2.15 ) contains a logic flaw that allows authenticated users with subscriber level access or higher to perform unauthorized actions. Specifically, an attacker can export plugin settings as a .txt file or modify the main...

CVE-2020-6167

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

CVE-2020-6167

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

Cross site request forgery (csrf)

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

CVE-2020-6167

The CVE-2020-6167 entry concerns WordPress plugin Minimal Coming Soon & Maintenance Mode (versions up to 2.10). The vulnerability is a CSRF to stored XSS and setting changes, permitted by a lack of nonce checks on settings endpoints, enabling an attacker to enable maintenance mode, inject XSS, mo...

CVE-2020-6166: Incorrect Default Permissions

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...

CVE-2020-6168: Missing Authorization

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting...

CVE-2020-6167: Cross-Site Request Forgery (CSRF)

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo...

PT-2020-18978

Name of the Vulnerable Software and Affected Versions Minimal Coming Soon & Maintenance Mode versions 2.10 and earlier Description A flaw in the Minimal Coming Soon & Maintenance Mode plugin allows authenticated users with basic access to enable and disable maintenance-mode settings. This impacts...

PT-2020-18977

Name of the Vulnerable Software and Affected Versions Minimal Coming Soon & Maintenance Mode versions 2.10 and earlier Description A flaw in the Minimal Coming Soon & Maintenance Mode plugin allows a CSRF attack, enabling an attacker to enable maintenance mode, inject XSS, modify important...

PT-2020-18976

Name of the Vulnerable Software and Affected Versions Minimal Coming Soon & Maintenance Mode versions 2.15 and earlier Description A flaw in the WordPress plugin allows authenticated users with basic access to export settings and change maintenance-mode themes. Recommendations For Minimal Coming...

Minimal Coming Soon & Maintenance Mode < 2.15 - CSRF to Stored XSS and Setting Changes

This plugin had no nonce checks on any of the settings to verify that a request came from a legitimate source, such as a logged in administrative user. Therefore, creating a CSRF to stored XSS in addition to significant setting changes. alert1" /...

WordPress Minimal Coming Soon & Maintenance Mode plugin <= 2.10 - CSRF to Stored XSS and Setting Changes vulnerability

CSRF to Stored XSS and Setting Changes vulnerability found by Chloe Chamberland in WordPress Minimal Coming Soon & Maintenance Mode plugin versions = 2.10. Solution Update the WordPress Minimal Coming Soon & Maintenance Mode plugin to the latest available version at least 2.15...

VulnCheck KEV: CVE-2020-6166

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes...