Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1576

WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Maintenance Mode & Coming Soon

  • 2.0.4 to < 2.0.4*affected
  • 2.4.5 to < 2.4.5affected

References