coming soon page \& maintenance mode vulnerabilities and fixes

Recent CVEs affecting coming soon page \& maintenance mode, with upgrade or downgrade steps. 3 tracked.

Also searched as: comingsoonpage\&maintenancemode.

coming soon page \& maintenance mode has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-02-28. Highest priority: CVE-2019-25140 (score 49/100).

• CVE-2024-1136 MEDIUM 5.3 UPGRADE The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due
• CVE-2019-25140 HIGH 7.2 UPGRADE The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scri
• CVE-2019-25139 MEDIUM 6.5 UPGRADE The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset i

FAQ

How do I fix coming soon page \& maintenance mode vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is coming soon page \& maintenance mode being exploited right now?

None of the tracked coming soon page \& maintenance mode CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which coming soon page \& maintenance mode CVE should I patch first?

CVE-2019-25140 currently ranks highest (49/100): The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scri.

RSS feed for coming soon page \& maintenance mode · ← Back to latest CVEs