Site Offline < 1.5.3 - Access Bypass
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.4%
exploitation probability
1.4%top 31% of all CVEs
observed exploitation
nono source reports it
The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.
Affected products
Unknown · Site Offline Or Coming Soon Or Maintenance Mode