Description
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently disable the website by enabling the plugin's maintenance mode. WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page version 1.87 is vulnerable; prior versions may also be affected.
Remediation
Disable the plugin until a fix is available
References
Related Vulnerabilities
WordPress Plugin Auto Post to Social Media-WordPress to Buffer Cross-Site Scripting (3.7.4)
WordPress Plugin Mobile blocks Security Bypass (1.0)
Grafana CVE-2024-1442 Vulnerability (CVE-2024-1442)
WordPress Plugin Coming Soon Page & Maintenance Mode Cross-Site Scripting (1.8.1)
MediaWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8857)