Read the docs

wpshopmart

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

wpshopmart records in CISA KEV

No wpshopmart vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coming Soon Page & Maintenance Mode 4 records MEDIUM Tabs Responsive 2 records LOW Testimonial Builder 2 records LOW

Records

4 records in Coming Soon Page & Maintenance Mode · all components

TI-2021-06483 CVE-2021-24191 · GHSA-cpf3-gq5c-48p5

WP Maintenance Mode & Site Under Construction < 1.8.2 - Arbitrary Plugin Installation/Activation via Low Privilege User

Priority MEDIUM 41

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin (including a specific versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01311 Published 2021-05-14 Fixed in 1.8.2 CWE-285
TI-2019-15243 CVE-2019-25140 · GHSA-g7hh-645p-7qhc

Coming Soon Page & Maintenance Mode <= 1.8.1 - Stored Cross Site Scripting

Priority LOW 39

The WordPress Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the logo_width, logo_height, rcsp_logo_url, home_sec_link_txt, rcsp_headline and rcsp_description pa…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00766 Published 2023-06-07 Fixed in 1.8.2 CWE-79
TI-2019-15242 CVE-2019-25139 · GHSA-9rpp-j343-49jh

Coming Soon Page & Maintenance Mode <= 1.8.1 - Unauthenticated Settings Reset

Priority LOW 36

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthenticated settings reset in versions up to, and including 1.8.1 due to missing capability checks in the ~/functions/data-reset-post.php…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00814 Published 2023-06-07 No fix listed CWE-862
TI-2024-01053 CVE-2024-1136 · GHSA-ph3h-5mmq-2rgv

Coming Soon Page & Maintenance Mode <= 2.2.1 - Maintenance Mode Bypass

Priority LOW 30

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsm_coming_soon_redirect function in all versions up to, and in…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00465 Published 2024-02-28 No fix listed CWE-862
Open these records in search →