Extension WordPress
Vulnérabilités Minimal Coming Soon – Coming Soon Page
Cette page rassemble les failles publiées pour Minimal Coming Soon – Coming Soon Page, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Minimal Coming Soon – Coming Soon Page
7 fiches
Minimal Coming Soon – Coming Soon Page <= 2.38 – Missing Authorization to Limited Settings Change
The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the validate_ajax, deactivate_ajax, and save_ajax functions in all versions up to, and including,…
*-2.38
2.39
07/06/2024
Minimal Coming Soon – Coming Soon Page <= 2.37 – Unauthenticated Maintenance Mode Bypass
The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request…
*-2.37
2.38
05/02/2024
Minimal Coming Soon – Coming Soon Page <= 2.33 – Authenticated (Administrator+) Cross-Site Scripting
The Minimal Coming Soon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘custom_css’ and 'custom_html' parameters in versions up to, and including, 2.33 due to insufficient input sanitization and output escaping. This makes it possible…
*-2.33
2.35
21/11/2022
Minimal Coming Soon – Coming Soon Page <= 2.33 – Authenticated (Admin+) Stored Cross-Site Scripting
The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_css value in versions up to, and including, 2.33 due to insufficient input sanitization and output escaping. This makes…
*-2.34
2.35
05/08/2022
Minimal Coming Soon & Maintenance Mode <= 2.10 – Cross-Site Request Forgery to Stored Cross-Site Scripting and Setting Changes
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows a CSRF attack to enable maintenance mode, inject XSS, modify several important settings, or include remote files as a logo.
*-2.10
2.15
08/01/2020
Minimal Coming Soon & Maintenance Mode <= 2.16 – Missing Authorization to Export Settings/Theme Change
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.15, allows authenticated users with basic access to export settings and change maintenance-mode themes.
[*, 2.17)
2.17
08/01/2020
Minimal Coming Soon & Maintenance Mode <= 2.10 – Missing Authorization
A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings (impacting the availability and confidentiality of a vulnerable site, along with the…
[*, 2.15)
2.15
18/12/2019
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.