Lucene search
+L

415 matches found

Positive Technologies
Positive Technologies
added 2025/04/15 12:00 a.m.10 views

PT-2025-16317 · Unknown · Notfound Coming Soon

Name of the Vulnerable Software and Affected Versions: NotFound Coming Soon, Maintenance Mode versions n/a through 1.1.1 Description: The issue is related to Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This...

7.5CVSS7.9AI score0.00548EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/04/04 12:00 a.m.13 views

WordPress plugin CMP – Coming Soon & Maintenance 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in WordPres...

9.1CVSS8.6AI score0.00658EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:56 a.m.5 views

CVE-2025-23836

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SuryaBhan Custom Coming Soon custom-coming-soon allows Reflected XSS.This issue affects Custom Coming Soon: from n/a through = 2.2...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:00 a.m.9 views

PT-2025-5390 · Seedprod · Seedprod Coming Soon Page

Name of the Vulnerable Software and Affected Versions: SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd versions n/a through 6.18.9 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross Site Request Forgery. This problem affects th...

4.3CVSS6.9AI score0.00161EPSS
SaveExploits0References3
NVD
NVD
added 2025/01/24 6:15 p.m.13 views

CVE-2025-24546

Cross-Site Request Forgery CSRF vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through = 1.0.9...

5.4CVSS0.00209EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/24 6:15 p.m.10 views

CVE-2025-24543

Cross-Site Request Forgery CSRF vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery. This issue affects Ultimate Coming Soon & Maintenance: from n/a through 1.0.9...

4.3CVSS5.8AI score0.00216EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/24 6:15 p.m.12 views

CVE-2025-24546

Cross-Site Request Forgery CSRF vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery. This issue affects Ultimate Coming Soon & Maintenance: from n/a through 1.0.9...

5.4CVSS7.3AI score0.00209EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.8 views

WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Marek Mikita in WordPress Plugin Ultimate Coming Soon & Maintenance versions = 1.0.9...

5.4CVSS7AI score0.00209EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/24 12:00 a.m.9 views

WordPress plugin Ultimate Coming Soon & Maintenance 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.7AI score0.00216EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/24 12:00 a.m.9 views

WordPress plugin Ultimate Coming Soon & Maintenance 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

5.4CVSS8.4AI score0.00209EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/23 4:15 p.m.10 views

CVE-2025-23836

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SuryaBhan Custom Coming Soon custom-coming-soon allows Reflected XSS.This issue affects Custom Coming Soon: from n/a through = 2.2...

7.1CVSS0.00255EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/23 3:29 p.m.3 views

CVE-2025-23836 WordPress Custom Coming Soon Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SuryaBhan Custom Coming Soon custom-coming-soon allows Reflected XSS.This issue affects Custom Coming Soon: from n/a through = 2.2...

7.1CVSS7.2AI score0.00255EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/23 12:00 a.m.8 views

WordPress plugin Custom Coming Soon 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

7.1CVSS7.4AI score0.00255EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/01/16 6:42 p.m.10 views

WordPress Custom Coming Soon Plugin <= 2.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Custom Coming Soon versions = 2.2...

7.1CVSS6.1AI score0.00255EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.8 views

PT-2024-11756 · 8 Degree Themes · 8Degree Themes Coming Soon Landing Page/Maintenance Mode Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin versions 2.2.0 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows for broken access control and the retrieval of...

5.3CVSS7AI score0.00504EPSS
SaveExploits0References17
NVD
NVD
added 2024/12/06 9:15 a.m.27 views

CVE-2024-9706

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsmactivatelitetemplatelite function in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to change...

5.3CVSS0.00356EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/06 9:15 a.m.20 views

CVE-2024-9705

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsmupdatetemplatenamelite' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with...

4.3CVSS7.3AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/06 9:15 a.m.22 views

CVE-2024-9706

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsmactivatelitetemplatelite function in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to change...

5.3CVSS7.3AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/12/06 12:00 a.m.10 views

PT-2024-39773 · WordPress · Rstheme Ultimate Coming Soon & Maintenance

Name of the Vulnerable Software and Affected Versions: The Ultimate Coming Soon & Maintenance plugin for WordPress versions up to, and including, 1.0.9 Description: The issue allows unauthorized modification of data due to a missing capability check on the ucsm activate lite template lite functio...

5.3CVSS7.2AI score0.00356EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/10/06 11:42 a.m.18 views

CVE-2024-47299 WordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Stored XSS.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: fr...

5.9CVSS5.2AI score0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder