Medium · 5.9 CVE-2023-49842 EUVD-2023-53750GHSA-m8q6-782w-wg52

WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)

Published Dec 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WPExperts.io Product: Rocket Maintenance Mode & Coming Soon Page

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpexpertsio Rocket Maintenance Mode & Coming Soon Page allows Stored XSS.This issue affects Rocket Maintenance Mode & Coming Soon Page: from n/a through 4.3.

Affected products

Vendor	Product	Affected	Fixed
wpexpertsio	Rocket Maintenance Mode & Coming Soon Page	≤ 4.3	—

References

https://patchstack.com/database/vulnerability/rocket-maintenance-mode/wordpress-rocket-maintenance-mode-coming-soon-page-plugin-4-3-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry