Not rated

CVE-2022-0199 The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail…

Description

The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail AJAX action, allowing attackers to make logged in admin to send arbitrary emails to all subscribed users via a CSRF attack

Affected products and versions

Product	Affected versions	Fixed in
Coming soon and Maintenance mode 3.6	earliest → < 3.6.8	3.6.8

The 3 CVEs of Coming soon and Maintenance mode →

CVE-2022-0164 The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not have authorisation and CSRF checks in its… Not rated CVE-2021-24577 The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by… Not rated

Do you use Coming soon and Maintenance mode?

Track this CVE Watch Coming soon and Maintenance mode Check my SBOMs

www.cveye.io/en/cve/CVE-2022-0199

Timeline

Published February 21, 2022
Last modified August 2, 2024

References

wpscan.com wpscan.com
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE

CVE-2022-0199 The Coming soon and Maintenance mode WordPress plugin before 3.6.8 does not have CSRF check in its coming_soon_send_mail…

Description

Affected products and versions

Other CVEs of Coming soon and Maintenance mode