Freehtmldesigns Site Offline — known CVE vulnerabilities

Every CVE whose affected-product data names Freehtmldesigns Site Offline, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-35773 — CVSS 8.8 (high): The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF.
• CVE-2023-49190 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chandra Shekhar Sahu Site Offline Or…
• CVE-2022-1580 — CVSS 4.3 (medium): The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do…