CVE-2022-1576

CVE-2022-1576: WP Maintenance Mode & Coming Soon < 2.4.5 - Subscribed Users Deletion via CSRF

Vendor Unknown
Product WP Maintenance Mode & Coming Soon
Weakness CWE-352 · CSRF
Published July 11, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Key dates

02Disclosure timeline

July 11, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-7379 A security bypass vulnerability was found in DataSync Center installed on ADM CVE-2025-68604 WordPress WPGraphQL plugin <= 2.5.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-2494 ProfileGrid <= 5.9.8.2 - Cross-Site Request Forgery to Group Membership Request Approval/Denial CVE-2025-46439 WordPress Plugin Central plugin <= 2.5.1 - CSRF to Arbitrary File Deletion vulnerability CVE-2025-5932 Homerunner <= 1.0.30 - Cross-Site Request Forgery to Settings Update