CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Weblizar Coming Soon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Coming Soon: from n/a through 1.6.3.
Explanation of Vulnerability in Simple Terms
The Coming Soon plugin for WordPress contains an information exposure vulnerability that allows unauthenticated attackers to read sensitive data over the network. The vulnerability exists in versions up to 1.6.3 and requires no user interaction. An attacker can access restricted information without authentication, potentially exposing configuration details or other non-public data.
What an attacker can do
Read sensitive information from the site without logging in.
Potential impact on your site
Sensitive site data may be exposed to anyone on the internet without your knowledge.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
