Skip to content
Threat Feed
Subscribe

Product

CMP – Coming Soon & Maintenance Plugin (<= 4.1.17)

1 brief RSS
high advisory

Privilege Escalation in CMP - Coming Soon & Maintenance Plugin for WordPress

The CMP - Coming Soon & Maintenance Plugin is vulnerable to privilege escalation due to an unauthenticated AJAX setting import that allows authenticated editors to modify arbitrary site options.

CMP – Coming Soon & Maintenance Plugin wordpress privilege-escalation web-application cms
1r 1t 1c