CVE-2022-1576: Cross-Site Request Forgery (CSRF)

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

PT-2022-13975

Name of the Vulnerable Software and Affected Versions WP Maintenance Mode & Coming Soon WordPress plugin versions prior to 2.4.5 Description The issue is related to a lack of CSRF protection when emptying the subscribed users list. This could allow attackers to perform a CSRF attack, making a...