CVE-2022-1580CWE-639

CVE-2022-1580: vulnerability in Site Offline Or Coming Soon Or Maintenance Mode

Site Offline < 1.5.3 - Access Bypass

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.6%
The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.