Vulnerabilities > CVE-2022-1580 - Authorization Bypass Through User-Controlled Key vulnerability in Freehtmldesigns Site Offline

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
freehtmldesigns
CWE-639
NVD
Published: 2022-09-19
Updated: 2022-09-21

Summary

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.

Vulnerable Configurations

Part Description Count
Application
Freehtmldesigns
34

Common Weakness Enumeration (CWE)

References