CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin allows Retrieve Embedded Sensitive Data.This issue affects Coming Soon Landing Page and Maintenance Mode WordPress Plugin: from n/a through 2.2.0.
Explanation of Vulnerability in Simple Terms
The Coming Soon Landing Page and Maintenance Mode plugin for WordPress does not properly check user permissions before allowing access to sensitive settings and data. An unauthenticated attacker can read configuration details and potentially other non-public information without logging in. Update to a version newer than 2.2.0.
What an attacker can do
Read plugin settings and non-public site information without authentication.
Potential impact on your site
Sensitive plugin configuration and site data may be exposed to anyone on the internet.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
