Vulnerability · Published Apr 8, 2026 · Assigned by Patchstack
CVE-2026-39464WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability
Medium 5.5
In plain English
A medium-severity server-side request forgery in Coming Soon Page, Under Construction & Maintenance Mode by SeedProd from SeedProd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 91.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.19.8.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SeedProd | Coming Soon Page, Under Construction & Maintenance Mode by SeedProd | 0 – through 6.19.8 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N