CVE-2022-1580: Site Offline < 1.5.3 - Access Bypass
Freehtmldesigns · Site Offline Or Coming Soon Or Maintenance Mode
Fixed in 1.5.3 · Affected: Freehtmldesigns Site Offline Or Coming Soon Or Maintenance Mode before 1.5.3 · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 76% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Site Offline Or Coming Soon Or Maintenance Modefrom 1.5.3 before 1.5.3
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- Site Offline WP Plugin < 1.5.3 - Authorization Bypass · nuclei template in projectdiscovery/nuclei-templates
- Weakness
- Insecure Direct Object Reference
- Published
- September 2022
CoverageNo articles yet
No CyberSIXT article names CVE-2022-1580 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.