Webfactoryltd

Minimal Coming Soon & Maintenance Mode

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2024-5087

  • EPSS 0.23%
  • Veröffentlicht 08.06.2024 06:15:09
  • Zuletzt bearbeitet 21.11.2024 09:46:56

The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the validate_ajax, deactivate_ajax, and save_ajax functions in all versions up to, and including, ...

5.3

CVE-2024-1075

  • EPSS 0.48%
  • Veröffentlicht 05.02.2024 22:16:07
  • Zuletzt bearbeitet 21.11.2024 08:49:44

The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request path. This mak...

5.5

CVE-2020-6166

Exploit
  • EPSS 0.41%
  • Veröffentlicht 09.01.2020 20:15:11
  • Zuletzt bearbeitet 21.11.2024 05:35:13

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes.

7.6

CVE-2020-6168

Exploit
  • EPSS 1.24%
  • Veröffentlicht 09.01.2020 20:15:11
  • Zuletzt bearbeitet 21.11.2024 05:35:14

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings (impacting the availability and confidentiality of a vulnerable site, al...

8.8

CVE-2020-6167

Exploit
  • EPSS 0.73%
  • Veröffentlicht 09.01.2020 19:15:10
  • Zuletzt bearbeitet 21.11.2024 05:35:13

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo.