Read the docs

RSTheme

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

RSTheme records in CISA KEV

No RSTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultimate Coming Soon & Maintenance 4 records LOW

Records

4 records in Ultimate Coming Soon & Maintenance · all components

TI-2024-09003 CVE-2024-9706 · GHSA-67pg-v4wj-5w9x

Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Unauthenticated Template Activation

Priority LOW 30

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00366 Published 2024-12-06 No fix listed CWE-862
TI-2025-18263 CVE-2025-24546 · GHSA-4hp8-c3wm-fwh9

WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00218 Published 2025-01-24 No fix listed CWE-352
TI-2024-09002 CVE-2024-9705 · GHSA-qxq3-cg95-r82h

Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Template Name Update

Priority LOW 20

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2024-12-06 No fix listed CWE-862
TI-2025-18260 CVE-2025-24543 · GHSA-x9p2-255h-fh6r

WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00221 Published 2025-01-24 No fix listed CWE-352
Open these records in search →