CVE-2024-1181

The Coming Soon, Under Construction & Maintenance Mode By Dazzler plugin for WordPress is vulnerable to maintenance mode bypass in all versions up to, and including, 2.1.2. This is due to the plugin relying on the REQUEST_URI to determine if the page being accesses is an admin area. This makes it possible for unauthenticated attackers to bypass maintenance mode and access the site which may be considered confidential when in maintenance mode.

• CWE-862

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3054042%40coming-soon-wp&new=3054042%40coming-soon-wp&sfp_email=&sfph_mail=
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc144cd-7119-477f-9fa1-b00cab215077?source=cve
• https://plugins.trac.wordpress.org/browser/coming-soon-wp/trunk/coming-soon-wp.php#L45
• https://www.wordfence.com/threat-intel/vulnerabilities/id/6dc144cd-7119-477f-9fa1-b00cab215077?source=cve

Published

Mar 20, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11804The Planaday API plugin for WordPress is vulnerable to Refle…6.1
• CVE-2024-11805The Quick License Manager – WooCommerce Plugin plugin for Wo…6.1
• CVE-2024-11806The PKT1 Centro de envios plugin for WordPress is vulnerable…6.1
• CVE-2024-11807The NPS computy plugin for WordPress is vulnerable to Reflec…6.1
• CVE-2024-11808The Pingmeter Uptime Monitoring plugin for WordPress is vuln…6.1
• CVE-2024-11809The Primer MyData for Woocommerce plugin for WordPress is vu…6.1
• CVE-2024-11810The PayGreen Payment Gateway plugin for WordPress is vulnera…6.1
• CVE-2024-11811The Feedify – Web Push Notifications plugin for WordPress is…6.1
• CVE-2024-11812The Wtyczka SeoPilot dla WP plugin for WordPress is vulnerab…6.1
• CVE-2024-11813The Pulsating Chat Button plugin for WordPress is vulnerable…6.1
• CVE-2024-11814The Additional Custom Order Status for WooCommerce plugin fo…6.1
• CVE-2024-11815The Pósturinn\'s Shipping with WooCommerce plugin for W…6.1