VendorsWebFactory Ltdminimal_coming_soon_%5C%26_maintenance_modeall versions
Vulnerabilities

WebFactory Ltd Minimal Coming Soon & Maintenance Mode

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2020-6167
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo.
Published 2020-01-09 · Modified
9.6EPSS 0.009
CVE-2020-6168
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings (impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting).
Published 2020-01-09 · Modified
7.6EPSS 0.020
CVE-2024-5087
Minimal Coming Soon – Coming Soon Page <= 2.38 - Missing Authorization to Limited Settings Change
Published 2024-06-08 · Modified
6.3EPSS 0.004
CVE-2020-6166
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes.
Published 2020-01-09 · Modified
5.5EPSS 0.011
CVE-2024-1075
Minimal Coming Soon – Coming Soon Page <= 2.37 - Unauthenticated Maintenance Mode Bypass
Published 2024-02-05 · Modified
5.3EPSS 0.007