CVE-2024-1473mediumCWE-284

CVE-2024-1473: medium-severity vulnerability in colorlibplugins Coming Soon & Maintenance Mode…

Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure

Published · Updated

Follow this CVE+ Monitor Coming Soon & Maintenance Mode by Colorlib

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided by the plugin.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
colorlibplugins · Coming Soon & Maintenance Mode by Colorlib