Description
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently export settings and change maintenance mode themes. WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page version 2.15 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.17 or latest
References
Related Vulnerabilities
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15808)
WordPress Plugin FooBox Image Lightbox Cross-Site Scripting (1.0.4)
MySQL CVE-2020-14861 Vulnerability (CVE-2020-14861)
WordPress Plugin Justified Gallery Unspecified Vulnerability (1.4.1)