Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Coming Soon Page – Responsive Coming Soon & Maintenance Mode Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 12 vulnerability records associated with Coming Soon Page – Responsive Coming Soon & Maintenance Mode, published between 2018 and 2024.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

12Total records
0Critical
2High
10Medium
0Low
0Informational
11Patched records
1Currently marked unpatched
2018-01-12First disclosure
2024-07-11Latest disclosure
12 of 12CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
20181010 records
202311 records
202411 records

Severity Breakdown

SeverityRecordsShare
High216.7%
Medium1083.3%

Vulnerability-Type Breakdown

Cross-Site Scripting

9 records75%

First: 2018. Latest: 2018.

CSRF

1 record8.3%

First: 2018. Latest: 2018.

SQL Injection

1 record8.3%

First: 2023. Latest: 2023.

Information Disclosure

1 record8.3%

First: 2024. Latest: 2024.

Patch Status

Patched
11
Currently marked unpatched
1
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 1.6.0
  • 1.1.19

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-1.6.3Coming Soon <= 1.6.3 - Unauthenticated Information ExposureJuly 11, 2024Not suppliedMedium
*-1.5.9Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL InjectionJuly 5, 20231.6.0High
[*, 1.1.19)Coming Soon <= 1.1.18 - Stored Cross-Site ScriptingJanuary 22, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via coming-soon_sub_title parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_height parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via bg_color parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_width parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via counter_title parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Request ForgeryJanuary 12, 20181.1.19High
[*, 1.1.19)Coming Soon < 1.1.19 - Stored Cross-Site ScriptingJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via social_icon_1 parameterJanuary 12, 20181.1.19Medium
*-1.1.18Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via button_text_link parameterJanuary 12, 20181.1.19Medium

Selected source records

Latest Records

MediumCVE-2024-38756

Coming Soon <= 1.6.3 - Unauthenticated Information Exposure

Published: July 11, 2024

Affected versions
*-1.6.3
Patched versions
Not supplied
Original Wordfence record
HighCVE-2022-46849

Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection

Published: July 5, 2023

Affected versions
*-1.5.9
Patched versions
1.6.0
Original Wordfence record
MediumCVE-2018-5657

Coming Soon <= 1.1.18 - Stored Cross-Site Scripting

Published: January 22, 2018

Affected versions
[*, 1.1.19)
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5663

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via button_text_link parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5664

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via social_icon_1 parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5659

Coming Soon < 1.1.19 - Stored Cross-Site Scripting

Published: January 12, 2018

Affected versions
[*, 1.1.19)
Patched versions
1.1.19
Original Wordfence record
HighCVE-2018-5658

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Request Forgery

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5662

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via counter_title parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record

Highest-Severity Records

HighCVE-2018-5658

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Request Forgery

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
HighCVE-2022-46849

Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection

Published: July 5, 2023

Affected versions
*-1.5.9
Patched versions
1.6.0
Original Wordfence record
MediumCVE-2018-5657

Coming Soon <= 1.1.18 - Stored Cross-Site Scripting

Published: January 22, 2018

Affected versions
[*, 1.1.19)
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5663

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via button_text_link parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5664

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via social_icon_1 parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5659

Coming Soon < 1.1.19 - Stored Cross-Site Scripting

Published: January 12, 2018

Affected versions
[*, 1.1.19)
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5662

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via counter_title parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record
MediumCVE-2018-5661

Coming Soon Page – Responsive Coming Soon & Maintenance Mode <= 1.1.18 - Cross-Site Scripting via logo_width parameter

Published: January 12, 2018

Affected versions
*-1.1.18
Patched versions
1.1.19
Original Wordfence record

Currently Marked Unpatched Records

MediumCVE-2024-38756

Coming Soon <= 1.6.3 - Unauthenticated Information Exposure

Published: July 11, 2024

Affected versions
*-1.6.3
Patched versions
Not supplied
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory