CVE-2022-1945: Colorlib Coming Soon & Maintenance Mode

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high privilege users such as admin to perform Stored Cross-Site Scripting when unfiltered_html is disallowed (for example in multisite setup)

Affected products

• Colorlib Coming Soon & Maintenance Mode: before 1.0.99 (fixed in 1.0.99)

Published 2022-06-20. Last modified 2026-06-17.