CVE Database /
CVE-2024-1072
CVE · High
CVE-2024-1072 — Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode [coming-soon] < 6.15.22
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-1072
|
Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode [coming-soon] < 6.15.22 |
Missing Authorization |
High
7.5
|
< 6.15.22
|
6.15.22 |
2024-01-31 |
—
|
CVE-2024-1072
The SeedProd Website Builder plugin for WordPress contains a vulnerability in versions up to 6.15.21 where the seedprod_lite_new_lpage function fails to verify user permissions before processing requests, allowing unauthenticated users to modify content on coming soon pages, maintenance mode pages, login pages, and 404 pages created with the plugin. Version 6.15.22 was released to fix this issue but introduced a separate bug affecting administrative pages. Users should update to version 6.15.23 or later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings