Colorlib Coming Soon Maintenance Vulnerabilities

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided...

CVSS:

5.3

Affected:

up to 1.0.99

Fixed in:

1.1.0

Disclosed:

Mar 19, 2024

CVE-2024-1473 on NVD →

The plugin Coming Soon & Maintenance Mode by Colorlib for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘input’ parameter of the ccsm_sanitize_google_analytics function in versions up to, and including, 1.0.98 due to insufficient input sanitization and output escaping. This makes it possible for authen...

CVSS:

5.5

Affected:

up to 1.0.98

Fixed in:

1.0.99

Disclosed:

May 27, 2022

CVE-2022-1945 on NVD →