CVE-2022-1576CWE-352

CVE-2022-1576: vulnerability in WP Maintenance Mode & Coming Soon

WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF

Published · Updated

Follow this CVE+ Monitor WP Maintenance Mode & Coming Soon

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Affected products
Unknown · WP Maintenance Mode & Coming Soon