CVE-2021-36829

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 at WordPress.

Score

CVSS 3.1 4.8 Medium

Status

Modified - audit@patchstack.com

Published

2022-09-06

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Launcher (Mythemeshop)
• Launcher Coming Soon Maintenance Mode Wordpress Plugin (Mythemeshop)

References

• https://patchstack.com/database/vulnerability/launcher/wordpress-launcher-coming-soon-maintenance-mode-plugin-1-0-11-au…
• https://wordpress.org/plugins/launcher/