CVE-2022-1576CWE-352

WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF

published July 11, 2022

CVSS
—
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00523 · 43.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-07-11T12:55Z
EPSS history
Timeline
  • 11 JUL 12:55Z
    WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF
    cvelistv5