CVE-2026-39464

MediumCVSS 5.5

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

The Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF).

Risk Assessment

An attacker can make requests from the server to internal resources, potentially leading to data disclosure or further attacks.

Recommendation

Update the Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin to version 6.19.9 or later.

Original NVD description (English source)

Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request Forgery.This issue affects Coming Soon Page, Under Construction & Maintenance Mode by SeedProd: from n/a through <= 6.19.8.