CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Authentication Bypass by Spoofing vulnerability in ilyasine Maintenance & Coming Soon Redirect Animation maintenance-coming-soon-redirect-animation allows Identity Spoofing.This issue affects Maintenance & Coming Soon Redirect Animation: from n/a through <= 2.3.3.
Explanation of Vulnerability in Simple Terms
The Maintenance & Coming Soon Redirect Animation plugin for WordPress contains an authentication bypass vulnerability in versions up to 2.3.3. An attacker on the network can access sensitive information without authentication by exploiting improper authentication checks. The vulnerability requires specific conditions to exploit but can expose confidential data. Update to a version newer than 2.3.3 to remediate.
What an attacker can do
Access sensitive information without logging in by exploiting weak authentication checks.
Potential impact on your site
Sensitive data may be exposed to unauthenticated visitors without your knowledge or action.
Conditions required to exploit
Network access; no authentication or user interaction required, but exploitation requires specific conditions.
Key dates
External resources
Related vulnerabilities
