Coming Soon And Maintenance Mode Security Vulnerabilities and Issues — Coming Soon And Maintenance Mode CVE List

WpdevartComing Soon And Maintenance Mode

3 matches found

CVE•added 2022/02/21 10:46 a.m.•102 views

CVE-2022-0199

CVE-2022-0199 concerns the WordPress plugin Coming soon and Maintenance mode (pre-3.6.8). The vulnerability is a CSRF flaw in the coming_soon_send_mail AJAX action, which allows a logged-in admin to cause the site to send arbitrary emails to all subscribed users. Affected versions are prior to 3....

4.3CVSS4.6AI score0.00464EPSS

Web

CVE•added 2022/02/21 10:46 a.m.•80 views

CVE-2022-0164

CVE-2022-0164 affects the WordPress plugin Coming soon and Maintenance mode. The vulnerability stems from missing authorization and CSRF checks in the coming_soon_send_mail AJAX action, enabling any authenticated user with a role as low as subscriber to send arbitrary emails to all subscribed use...

4.3CVSS4.5AI score0.00344EPSS

Web

CVE•added 2021/10/11 10:45 a.m.•52 views

CVE-2021-24577

CVE-2021-24577 affects the WordPress Coming Soon and Maintenance Mode plugin prior to version 3.5.3. The vulnerability is an authenticated stored XSS caused by improper input sanitization when setting/adding/modifying coming soon or maintenance mode pages. Impact is client-side JavaScript executi...

5.4CVSS5.3AI score0.006EPSS