Lucene search
+L

415 matches found

NVD
NVD
added 2024/06/04 11:15 a.m.27 views

CVE-2023-49741

Authentication Bypass by Spoofing vulnerability in wpdevart Coming soon and Maintenance mode allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming soon and Maintenance mode: from n/a through 3.7.3...

3.7CVSS4.3AI score0.0034EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/06/03 1:35 p.m.11 views

WordPress Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages plugin <= 45.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Savphill Patchstack Alliance in WordPress Plugin Visual Composer Website Builder versions = 45.8.0...

6.5CVSS6.1AI score0.00279EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/04/15 9:15 a.m.21 views

CVE-2024-32088

Cross-Site Request Forgery CSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.15.20...

4.3CVSS4.6AI score0.00212EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/15 9:06 a.m.115 views

CVE-2024-32088

CVE-2024-32088 is a Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode. Affected: SeedProd Coming Soon Page/SeedProd (WordPress plugin) up to version 6.15.20. Root cause: CSRF vulnerability in the plugin’s handling of Coming Soon/Ma...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/15 9:06 a.m.19 views

CVE-2024-32088 WordPress Website Builder plugin <= 6.15.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through 6.15.20...

4.3CVSS5.1AI score0.00212EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.15 views

PT-2024-24393 · Seedprod · Seedprod Coming Soon Page

Name of the Vulnerable Software and Affected Versions: SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd versions through 6.15.20 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user int...

4.3CVSS6.8AI score0.00212EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2024/04/11 9:47 a.m.8 views

WordPress Website Builder plugin <= 6.15.20 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Plugin Coming Soon Page, Under Construction & Maintenance Mode by SeedProd versions = 6.15.20...

4.3CVSS7AI score0.00212EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2024/03/28 7:15 a.m.18 views

CVE-2023-50374

Server-Side Request Forgery SSRF vulnerability in NiteoThemes CMP – Coming Soon & Maintenance.This issue affects CMP – Coming Soon & Maintenance: from n/a through 4.1.10...

5.5CVSS5.5AI score0.0035EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/28 6:31 a.m.27 views

CVE-2023-50374 WordPress CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin <= 4.1.10 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in NiteoThemes CMP – Coming Soon & Maintenance.This issue affects CMP – Coming Soon & Maintenance: from n/a through 4.1.10...

5.5CVSS5.8AI score0.0035EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/28 6:31 a.m.68 views

CVE-2023-50374

CVE-2023-50374 is a reported SSRF vulnerability in the WordPress plugin CMP – Coming Soon & Maintenance by NiteoThemes. The issue affects versions from unspecified start (n/a) up to 4.1.10 . The connected Red Hat advisory RH:CVE-2023-50374 mirrors the same description and confirms the SSRF impact...

5.5CVSS8.6AI score0.0035EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/03/27 12:00 a.m.14 views

WordPress CMP – Coming Soon & Maintenance Plugin <= 4.1.10 is vulnerable to Server Side Request Forgery (SSRF)

Software CMP – Coming Soon & Maintenance Type Plugin Vulnerable versions = 4.1.10 Fixed in 4.1.11 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2023-50374 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID...

5.5CVSS6.6AI score0.0035EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/20 7:15 a.m.10 views

CVE-2024-1473

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mo...

5.3CVSS5.8AI score0.00529EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.12 views

WordPress Plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.5AI score0.00586EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.9 views

WordPress Plugin Coming Soon & Maintenance Mode by Colorlib Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.1AI score0.00529EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/20 12:00 a.m.12 views

PT-2024-17266 · WordPress · Coming Soon

Name of the Vulnerable Software and Affected Versions: Coming Soon, Under Construction & Maintenance Mode By Dazzler plugin for WordPress versions up to, and including, 2.1.2 Description: The issue arises from the plugin relying on the REQUEST URI to determine if the page being accessed is an adm...

5.3CVSS9.6AI score0.00586EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/29 1:43 a.m.14 views

CVE-2024-1475

The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content thus bypassing the protection provided by the...

5.3CVSS5.8AI score0.00461EPSS
SaveExploits0References2
NVD
NVD
added 2024/02/29 1:43 a.m.25 views

CVE-2024-1475

The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content thus bypassing the protection provided by the...

5.3CVSS5.1AI score0.00461EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/29 1:43 a.m.40 views

Design/Logic Flaw

The Coming Soon Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.5 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content thus bypassing the protection provided by the...

5CVSS7.2AI score0.00461EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.9 views

WordPress Plugin Coming Soon Maintenance Mode Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.3CVSS6.3AI score0.00461EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/28 9:15 a.m.10 views

CVE-2024-1136

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsmcomingsoonredirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a...

5.3CVSS7.1AI score0.00465EPSS
SaveExploits0References2
Rows per page
Query Builder