Responsive Coming Soon Vulnerabilities

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsm_coming_soon_redirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a site with maintenance...

CVSS:

5.3

Affected:

up to 2.2.1

Fixed in:

2.2.2

Disclosed:

Feb 27, 2024

CVE-2024-1136 on NVD →

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php file which makes it possible for unauthenticated attackers to trigger a plugin settings reset.

CVSS:

6.5

Affected:

up to 1.8.1

Fixed in:

1.8.2

Disclosed:

Jul 17, 2019

CVE-2019-25139 on NVD →

The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logo_width, logo_height, rcsp_logo_url, home_sec_link_txt, rcsp_headline and rcsp_description parameters in versions up to, and including, 1.8.1 due to insufficient input sanitization and output e...

CVSS:

7.2

Affected:

up to 1.8.2

Fixed in:

1.8.2

Disclosed:

Jul 16, 2019

CVE-2019-25140 on NVD →