Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-1580

Description

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature.

POC

Reference

- https://wpscan.com/vulnerability/7b6f91cd-5a00-49ca-93ff-db7220d2630a

Github

- https://github.com/20142995/nuclei-templates