Vulnerabilities > CVE-2024-1075 - Unspecified vulnerability in Webfactoryltd Minimal Coming Soon & Maintenance Mode

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

webfactoryltd

NVD

Published: 2024-02-05

Updated: 2024-02-13

Summary

The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request path. This makes it possible for unauthenticated attackers to bypass maintenance mode and view pages that should be hidden.

Vulnerable Configurations

Part	Description	Count
Application	Webfactoryltd Webfactoryltd Minimal Coming Soon & Maintenance Mode 0.1 Webfactoryltd Minimal Coming Soon & Maintenance Mode 0.2 Webfactoryltd Minimal Coming Soon & Maintenance Mode 0.3 Webfactoryltd Minimal Coming Soon & Maintenance Mode 0.4 Webfactoryltd Minimal Coming Soon & Maintenance Mode 0.5 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.0 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.1 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.2 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.25 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.30 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.35 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.40 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.45 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.50 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.55 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.60 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.62 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.65 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.70 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.80 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.85 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.87 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.90 Webfactoryltd Minimal Coming Soon & Maintenance Mode 1.95 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.0 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.01 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.05 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.07 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.10 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.15 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.17 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.18 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.19 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.20 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.22 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.25 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.26 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.27 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.30 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.33 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.35 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.36 Webfactoryltd Minimal Coming Soon & Maintenance Mode 2.37	43

Summary

Vulnerable Configurations

References