CVE-2022-1580

CVE-2022-1580 affects the WordPress Site Offline plugin (versions before 1.5.3). The vulnerability is an authorization bypass where certain keywords in the URL query string allow bypassing the maintenance/offline protection, potentially exposing a site that should be offline. The NUCLEI template ...

CVE-2023-49190

CVE-2023-49190 affects the WordPress plugin “Site Offline Or Coming Soon Or Maintenance Mode.” It is a Stored XSS vulnerability caused by improper input neutralization during web page generation. Affected versions are ≤ 1.5.6. Red Hat/NVD entries mirror the description and confirm the issue; Patc...

CVE-2020-35773

CVE-2020-35773 concerns the WordPress Site Offline plugin prior to 1.4.4, which lacks several nonce checks (wp_create_nonce/wp_verify_nonce), enabling cross‑site request forgery (CSRF). The documented impact states that a logged‑in administrator could be coerced into changing plugin settings via ...