| Package | Affected versions | Patched versions |
|---|---|---|
| coming soon page & maintenance mode | ≤ 1.8.1 |
The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php file which makes it possible for unauthenticated attackers to trigger a plugin settings reset.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free