CVE-2022-0199CWE-352

CVE-2022-0199: falha em Coming soon and Maintenance mode

Coming soon and Maintenance mode < 3.6.8 - Arbitrary Email Sending to Subscribed Users via CSRF

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Coming soon and Maintenance mode

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%
The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed users via a CSRF attack
Produtos afetados
Unknown · Coming soon and Maintenance mode
CVEs relacionadas — Coming soon and Maintenance mode

No mesmo produto, das mais perigosas para as menos.

CVE-2021-24577—Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSSEPSS 0.6%CVE-2022-0164—Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed UsersEPSS 0.3%