Medium · 5.4 CVE-2022-46854 EUVD-2022-49635GHSA-2225-fj3w-f9wh

WordPress Launchpad – Coming Soon & Maintenance Mode Plugin Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 17, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.

Vendor	Product	Affected	Fixed
Obox Themes	Launchpad – Coming Soon & Maintenance Mode Plugin	≤ 1.0.13	—