https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1136.htmlhttps://patchthecve.com/cve/CVE-2024-1136.htmlWed, 17 Jun 2026 07:03:32 +0000MEDIUM 5.3: The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsm_coming_soon_redirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a shttps://patchthecve.com/cve/CVE-2019-25140.htmlhttps://patchthecve.com/cve/CVE-2019-25140.htmlWed, 17 Jun 2026 02:31:41 +0000HIGH 7.2: The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logo_width, logo_height, rcsp_logo_url, home_sec_link_txt, rcsp_headline and rcsp_description parameters in versions up to, and including, 1.8.1 due to insufficient input sanithttps://patchthecve.com/cve/CVE-2019-25139.htmlhttps://patchthecve.com/cve/CVE-2019-25139.htmlWed, 17 Jun 2026 02:31:40 +0000MEDIUM 6.5: The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php file which makes it possible for unauthenticated attackers to trigger a plugin s