Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: RSTheme Component: Ultimate Coming Soon & Maintenance Clear all filters
TI-2025-18260 CVE-2025-24543 · GHSA-x9p2-255h-fh6r

WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00221 Published 2025-01-24 No fix listed CWE-352
TI-2025-18263 CVE-2025-24546 · GHSA-4hp8-c3wm-fwh9

WordPress Ultimate Coming Soon & Maintenance plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00218 Published 2025-01-24 No fix listed CWE-352
TI-2024-09003 CVE-2024-9706 · GHSA-67pg-v4wj-5w9x

Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Unauthenticated Template Activation

Priority LOW 30

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in all versions up to, and…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00366 Published 2024-12-06 No fix listed CWE-862
TI-2024-09002 CVE-2024-9705 · GHSA-qxq3-cg95-r82h

Ultimate Coming Soon & Maintenance <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Template Name Update

Priority LOW 20

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2024-12-06 No fix listed CWE-862