Skip to main content

Ultimate Coming Soon Maintenance

4 CVEs product

Monthly

CVE-2025-24546 Jan 24, 18:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery.0.9. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Ultimate Coming Soon Maintenance Wordpress Plugin Rstheme
NVD
CVSS 3.1
5.4
EPSS
0.1%
CVE-2025-24543 Jan 24, 18:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery.0.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Ultimate Coming Soon Maintenance Wordpress Plugin Rstheme
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2024-9706 Dec 06, 09:15 MEDIUM This Month

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Ultimate Coming Soon Maintenance Wordpress Plugin Rstheme
NVD
CVSS 3.1
5.3
EPSS
0.3%
CVE-2024-9705 Dec 06, 09:15 MEDIUM This Month

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Ultimate Coming Soon Maintenance Wordpress Plugin Rstheme
NVD
CVSS 3.1
4.3
EPSS
0.1%
EPSS 0% CVSS 5.4
MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery.0.9. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Ultimate Coming Soon Maintenance +2
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance allows Cross Site Request Forgery.0.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Ultimate Coming Soon Maintenance +2
NVD
EPSS 0% CVSS 5.3
MEDIUM This Month

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Ultimate Coming Soon Maintenance +2
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Ultimate Coming Soon Maintenance +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy