SeedProd Coming Soon Page Server-Side Request Forgery Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability exists in the WordPress plugin 'Coming Soon Page, Under Construction & Maintenance Mode' by SeedProd, affecting versions through 6.19.8. This vulnerability allows attackers to make the server execute requests to arbitrary domains, potentially leading to the exposure of sensitive information from other services running on the system.

Impact

Exploitation of this vulnerability could allow a malicious actor to use the website to send requests to an external server of their choice, which could be used to access sensitive information from other services running on the server.

Remediation

Users of the affected plugin should update to version 6.19.9 or later. Patchstack users can enable auto-updates for vulnerable plugins.