CVE-2020-36752

Summary

CVE-2020-36752 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Coming Soon & Maintenance Mode Page plugin for WordPress. Versions up to 1.57 are susceptible to this issue. The root cause is the lack of appropriate nonce validation on the save_meta_box() function. As a result, unauthenticated attackers can manipulate meta boxes by tricking administrators into executing a malicious request. This could potentially lead to unauthorized modifications or data exfiltration.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.