CVE-2020-6168

The Minimal Coming Soon & Maintenance Mode WordPress plugin (versions through 2.10 ) contains a flaw that allows authenticated users with subscriber permissions or higher to enable and disable maintenance-mode settings. This vulnerability impacts the availability , confidentiality , and integrity...

CVE-2020-6166

The Minimal Coming Soon & Maintenance Mode WordPress plugin (versions through 2.15 ) contains a logic flaw that allows authenticated users with subscriber level access or higher to perform unauthorized actions. Specifically, an attacker can export plugin settings as a .txt file or modify the main...

CVE-2020-6167

The CVE-2020-6167 entry concerns WordPress plugin Minimal Coming Soon & Maintenance Mode (versions up to 2.10). The vulnerability is a CSRF to stored XSS and setting changes, permitted by a lack of nonce checks on settings endpoints, enabling an attacker to enable maintenance mode, inject XSS, mo...

CVE-2024-5087

CVE-2024-5087 affects the Minimal Coming Soon – Coming Soon Page WordPress plugin. The vulnerability is caused by missing capability checks in AJAX handlers (validate_ajax, deactivate_ajax, save_ajax) on all versions up to 2.38, enabling authenticated users with Subscriber-level access and above ...

CVE-2024-1075

CVE-2024-1075 affects the WordPress plugin Minimal Coming Soon – Coming Soon Page . The flaw permits unauthenticated maintenance mode bypass and information disclosure due to improper validation of the request path, affecting versions up to and including 2.37. The issue has been acknowledged by m...