Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Ultimate Coming Soon - Cross-Site Request Forgery (CSRF) (CVE-2025-24546)
Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through
PLUGIN
Ultimate Coming Soon
CVE-2025-24546
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Coming Soon - Cross-Site Request Forgery (CSRF) (CVE-2025-24543)
Cross-Site Request Forgery (CSRF) vulnerability in RSTheme Ultimate Coming Soon & Maintenance ultimate-coming-soon allows Cross Site Request Forgery.This issue affects Ultimate Coming Soon & Maintenance: from n/a through
PLUGIN
Ultimate Coming Soon
CVE-2025-24543
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Coming Soon - Broken Access Control (CVE-2024-9706)
The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ucsm_activate_lite_template_lite function in all versions up to, and including, 1.0.9. This makes it possible for unauthenticated attackers to change the template used for the coming soon / maintenance page.
PLUGIN
Ultimate Coming Soon
CVE-2024-9706
Risk Score
Threat Entry
Updated 2026-06-17
Ultimate Coming Soon - Broken Access Control (CVE-2024-9705)
The Ultimate Coming Soon & Maintenance plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ucsm_update_template_name_lite' function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change the name of the plugin's templates.
PLUGIN
Ultimate Coming Soon
CVE-2024-9705
Risk Score