The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsm_coming_soon_redirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a site with maintenance mode or coming-soon mode enabled to view the site's content.
References
Configurations
Configuration 1 (hide)
|
History
07 Feb 2025, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Wpshopmart
Wpshopmart coming Soon Page \& Maintenance Mode |
|
| References | () https://plugins.trac.wordpress.org/browser/responsive-coming-soon/trunk/redirect.php#L11 - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/e3c52d6e-b3f4-4ba8-aee4-b9f11704e1de?source=cve - Third Party Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:wpshopmart:coming_soon_page_\&_maintenance_mode:*:*:*:*:*:wordpress:*:* |
21 Nov 2024, 08:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/browser/responsive-coming-soon/trunk/redirect.php#L11 - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/e3c52d6e-b3f4-4ba8-aee4-b9f11704e1de?source=cve - |
28 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-28 09:15
Updated : 2025-02-07 17:32
NVD link : CVE-2024-1136
Mitre link : CVE-2024-1136
CVE.ORG link : CVE-2024-1136
JSON object : View
Products Affected
wpshopmart
- coming_soon_page_\&_maintenance_mode
CWE