5.3 Medium

CVE-2024-1473 The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all…

Description

The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided by the plugin.

Affected products and versions

Product	Affected versions	Fixed in
Coming Soon & Maintenance Mode by Colorlib 1.0	earliest → 1.0.99	No fix stated
coming_soon_\&_maintenance_mode 1.0	earliest → 1.0.99	No fix stated

Do you use Coming Soon & Maintenance Mode by Colorlib?

Track this CVE Watch Coming Soon & Maintenance Mode by Colorlib Check my SBOMs

www.cveye.io/en/cve/CVE-2024-1473

Timeline

Published March 20, 2024
Last modified April 8, 2026

References

www.wordfence.com www.wordfence.com
wordpress.org wordpress.org
plugins.trac.wordpress.org plugins.trac.wordpress.org

Track this CVE