CVE-2025-24540mediumCWE-352

CVE-2025-24540: falha de média gravidade em SeedProd Coming Soon Page, Under Construction…

WordPress Website Builder by SeedProd plugin <= 6.18.9 - Cross Site Request Forgery (CSRF) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Coming Soon Page, Under Construction & Maintenance Mode by SeedProd

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.2%
Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Cross Site Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.18.9.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
SeedProd · Coming Soon Page, Under Construction & Maintenance Mode by SeedProd
CVEs relacionadas — SeedProd Coming Soon Page, Under Construction…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-27368MEDIUMWordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-47299MEDIUMWordPress Website Builder by SeedProd <= 6.17.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-32088MEDIUMWordPress Website Builder plugin <= 6.15.20 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-39464MEDIUMWordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%