CVE-2020-36707

CVE-2020-36707 affects the WordPress Coming Soon & Maintenance Mode Page plugin (versions up to 1.57). The vulnerability is Cross-Site Request Forgery caused by confusing logic and missing/incorrect nonce validation, allowing unauthenticated attackers to perform actions as if they were an admin w...