Not rated
CVE-2022-1576 The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users…
Description
The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Maintenance Mode & Coming Soon 2.4 | earliest → < 2.4.5 | 2.4.5 |
| WP Maintenance Mode & Coming Soon 2.0 | 2.0.4 → latest | No fix stated |