Vulnerability Details CVE-2024-1075
The Minimal Coming Soon – Coming Soon Page plugin for WordPress is vulnerable to maintenance mode bypass and information disclosure in all versions up to, and including, 2.37. This is due to the plugin improperly validating the request path. This makes it possible for unauthenticated attackers to bypass maintenance mode and view pages that should be hidden.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.1%
CVSS Severity
CVSS v3 Score 3.7
Products affected by CVE-2024-1075
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:0.1
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:0.2
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:0.3
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:0.4
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:0.5
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.0
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.1
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.2
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.25
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.30
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.35
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.40
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.45
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.50
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.55
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.60
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.62
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.65
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.70
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.80
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.85
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.87
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.90
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:1.95
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.0
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.01
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.05
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.07
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.10
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.15
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.17
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.18
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.19
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.20
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.22
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.25
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.26
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.27
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.30
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.33
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.35
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.36
-
cpe:2.3:a:webfactoryltd:minimal_coming_soon_&_maintenance_mode:2.37