Coming Soon Page – Responsive Coming Soon & Maintenance Mode

Coming Soon Page – Responsive Coming Soon & Maintenance Mode has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2018 and 2024; 11 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2018 was the busiest year with 10 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

11 of the records (92%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (10) reported by d4wner.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage92%

Open

Fixed

Get automatic notifications for all Coming Soon Page – Responsive Coming Soon & Maintenance Mode vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2024-38756

Coming Soon <= 1.6.3 - Unauthenticated Information Exposure

Read the full analysis

Vulnerability Records

12 records


2024-07-11 00:00	Coming Soon <= 1.6.3 - Unauthenticated Information Exposure Coming Soon Page <= 1.6.3	`CVE-2024-38756`	5.3 Medium	Joshua Chan	No
2023-07-05 00:00	Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection Coming Soon Page <= 1.5.9	`CVE-2022-46849`	7.2 High	Le Ngoc Anh	Yes
2018-01-22 00:00	Coming Soon <= 1.1.18 - Stored Cross-Site Scripting Coming Soon Page < 1.1.19	`CVE-2018-5657`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via button_text_link parameter Coming Soon Page <= 1.1.18	`CVE-2018-5663`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via social_icon_1 parameter Coming Soon Page <= 1.1.18	`CVE-2018-5664`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon < 1.1.19 - Stored Cross-Site Scripting Coming Soon Page < 1.1.19	`CVE-2018-5659`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Request Forgery Coming Soon Page <= 1.1.18	`CVE-2018-5658`	8.8 High	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via counter_title parameter Coming Soon Page <= 1.1.18	`CVE-2018-5662`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_width parameter Coming Soon Page <= 1.1.18	`CVE-2018-5661`	5.5 Medium	d4wner	Yes
2018-01-12 00:00	Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via bg_color parameter Coming Soon Page <= 1.1.18	`CVE-2018-5666`	5.5 Medium	d4wner	Yes

Showing 1–10 of 12 reports