CVE-2025-24543

MEDIUM 4.3CVE-2025-24543 · Published 24/01/2025 · updated 17/06/2026

In short

CVE-2025-24543 is a MEDIUM (CVSS 4.3) vulnerability affecting ultimate coming soon & maintenance (rstheme).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.8% of all vulnerabilities.
Fix: update to 1.1.0 or later.

Package	Affected versions	Patched versions
ultimate coming soon & maintenance rstheme	`< 1.1.0`	`1.1.0`

Description

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through <= 1.0.9.

References

patchstack.com/database/Wordpress/Plugin/ultimate-coming-soon/vulnerability/wordpress-ultimate-coming-soon-maintenance-plugin-1-0-9-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

More vulnerabilities in ultimate coming soon & maintenance

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free