CVE-2022-1576: Themeisle Wp Maintenance Mode & Coming Soon

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The WP Maintenance Mode & Coming Soon WordPress plugin before 2.4.5 is lacking CSRF when emptying the subscribed users list, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected products

• Themeisle Wp Maintenance Mode & Coming Soon: before 2.4.5 (fixed in 2.4.5)

Published 2022-07-11. Last modified 2026-06-17.