Vulnerabilities > CVE-2024-1075 - Unspecified vulnerability in Webfactoryltd Minimal Coming Soon & Maintenance Mode

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
webfactoryltd
NVD
Published: 2024-02-05
Updated: 2024-02-13

Summary

The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request path. This makes it possible for unauthenticated attackers to bypass maintenance mode and view pages that should be hidden.

Vulnerable Configurations

Part Description Count
Application
Webfactoryltd
31

References