Colorlib Coming Soon \& Maintenance Mode vulnerabilities

2 vulnerabilities

Known vulnerabilities in Colorlib Coming Soon \& Maintenance Mode, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-1945colorlibcoming_soon_\&_maintenance_mode+2
EPSS score
0.59%
The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high privilege users such as admin to perform Stored Cross-Site Scripting when unfiltered_html is disallowed (for example in multisite setup)5.3CVE-2024-1473colorlibcoming_soon_\&_maintenance_mode+2
EPSS score
0.53%
The Coming Soon & Maintenance Mode by Colorlib plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.99 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page contents via REST API thus bypassing maintenance mode protection provided by the plugin.