CVE-2025-24540

Cross-Site Request Forgery (CSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Cross Site Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.18.9.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - audit@patchstack.com

Published

2025-01-27

Last modified

2026-05-11

Weaknesses

CWE-352

Affected products

• Coming Soon Page (Seedprod)
• Under Construction Maintenance Mode By Seedprod (Seedprod)

References

• https://patchstack.com/database/Wordpress/Plugin/coming-soon/vulnerability/wordpress-website-builder-by-seedprod-plugin…