CVE-2020-6168: Webfactoryltd Minimal Coming Soon & Maintenance Mode

High severity, CVSS 7.6. EPSS: 2% chance of exploitation in the next 30 days.

A flaw in the WordPress plugin, Minimal Coming Soon & Maintenance Mode through 2.10, allows authenticated users with basic access to enable and disable maintenance-mode settings (impacting the availability and confidentiality of a vulnerable site, along with the integrity of the setting).

Affected products

• Webfactoryltd Minimal Coming Soon & Maintenance Mode: up to and including 2.10

Published 2020-01-09. Last modified 2026-06-17.