Non notée
CVE-2022-1576 The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users…
Description
The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Maintenance Mode & Coming Soon 2.4 | premières → < 2.4.5 | 2.4.5 |
| WP Maintenance Mode & Coming Soon 2.0 | 2.0.4 → dernières | Pas de correctif indiqué |