blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2024-0708

MEDIUM 5.3 CVSS 3.1
Published
February 15, 2024
Last modified
June 17, 2026
NVD status
Modified
Reported by
security@wordfence.com
Weakness
CWE-200
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.7.2. This makes it possible for unauthenticated attackers to access landing pages that may not be public.

Affected WordPress components

  • Landing Page Cat – Coming Soon & Maintenance Pages Plugin · landing-page-cat
    Confirmed match Active
    Up to and including 1.7.2
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • fatcatapps Landing Page Cat – Coming Soon & Maintenance Pages — Up to and including 1.7.2
  • fatcatapps landing_page_cat — Before 1.7.3

References

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3034324/landing-page-cat/trunk/includes/landing/landing.php Patch
  • www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/7b34f50a-4d2d-49b8-86e4-0416c8be202b?source=cve Third Party Advisory
  • nvd.nist.gov Official NVD record