PT-2024-11756 · 8 Degree Themes · 8Degree Themes Coming Soon Landing Page/Maintenance Mode Wordpress Plugin

Rezaduty · Published 2024-12-13 · Updated 2024-12-15 · CVE-2022-47429

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin versions 2.2.0 and earlier

Description The issue is related to a Missing Authorization vulnerability, which allows for broken access control and the retrieval of embedded sensitive data. Users are urged to update to the latest version to mitigate risks.

Recommendations Update the 8Degree Themes Coming Soon Landing Page and Maintenance Mode WordPress Plugin to the latest version to secure the WordPress site. As a temporary workaround, consider restricting access to sensitive data until the plugin is updated.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2022-47429

Affected Products

8Degree Themes Coming Soon Landing Page/Maintenance Mode Wordpress Plugin

References · 18

• https://nvd.nist.gov/vuln/detail/CVE-2022-47429 · Security Note
• https://twitter.com/transilienceai/status/1867799243592815026 · Twitter Post
• https://twitter.com/transilienceai/status/1867799286458597726 · Twitter Post
• https://twitter.com/transilienceai/status/1868162387523588361 · Twitter Post
• https://twitter.com/transilienceai/status/1868162363792208162 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/8-degree-coming-soon-page/vulnerability/wordpress-coming-soon-landing-page-and-maintenance-mode-wordpress-plugin-plugin-2-2-0-broken-access-control?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1868162414056751195 · Twitter Post
• https://twitter.com/transilienceai/status/1867799256460910655 · Twitter Post
• https://twitter.com/transilienceai/status/1868162354417975592 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/8-degree-coming-soon-page/vulnerability/wordpress-coming-soon-landing-page-and-maintenance-mode-wordpress-plugin-plugin-2-2-0-broken-access-control?_s_id=cve · Note
• https://twitter.com/transilienceai/status/1867799275125514665 · Twitter Post
• https://twitter.com/transilienceai/status/1867799294599705060 · Twitter Post
• https://twitter.com/transilienceai/status/1868162429819002968 · Twitter Post
• https://twitter.com/CVEnew/status/1868033901207396481 · Twitter Post
• https://twitter.com/transilienceai/status/1868162403973640609 · Twitter Post