coming_soon_and_maintenance_mode Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/coming_soon_and_maintenance_mode/ Thu, 23 Feb 2023 14:07:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png coming_soon_and_maintenance_mode Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/coming_soon_and_maintenance_mode/ 32 32 CVE-2021-24577 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-24577/ Thu, 23 Feb 2023 14:07:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-24577/ The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

The post CVE-2021-24577 appeared first on CVE Vulnerability.

]]> The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

The post CVE-2021-24577 appeared first on CVE Vulnerability.

]]> CVE-2022-0164 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-0164/ Thu, 23 Feb 2023 05:01:49 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-0164/ The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have authorisation and CSRF checks in its coming_soon_send_mail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users

The post CVE-2022-0164 appeared first on CVE Vulnerability.

]]> The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have authorisation and CSRF checks in its coming_soon_send_mail AJAX action, allowing any authenticated users, with a role as low as subscriber to send arbitrary emails to all subscribed users

The post CVE-2022-0164 appeared first on CVE Vulnerability.

]]> CVE-2022-0199 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-0199/ Thu, 23 Feb 2023 05:01:49 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-0199/ The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed users via a CSRF attack

The post CVE-2022-0199 appeared first on CVE Vulnerability.

]]> The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed users via a CSRF attack

The post CVE-2022-0199 appeared first on CVE Vulnerability.

]]>