PatchTheCVErstheme vulnerabilities
Recent CVEs affecting rstheme products. 4 tracked.
rstheme has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-01-24. Highest priority: CVE-2024-9706 (score 31/100).
- CVE-2025-24546 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-
- CVE-2025-24543 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-
- CVE-2024-9706 MEDIUM 5.3 UPGRADE The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data
- CVE-2024-9705 MEDIUM 4.3 UPGRADE The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data
FAQ
How do I fix rstheme vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rstheme being exploited right now?
None of the tracked rstheme CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rstheme CVE should I patch first?
CVE-2024-9706 currently ranks highest (31/100): The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data.