Security Advisory
CVE-2022-1576
6.5
MEDIUM
Vulnerability Description
The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Published Date
July 11, 2022
Official Source
NIST NVD Advisory