CVE-2025-24543

Summary

CVE-2025-24543 is a Cross-Site Request Forgery (CSRF) vulnerability affecting RSTheme Ultimate Coming Soon & Maintenance. This issue allows an attacker to execute malicious actions on a victim's website, by tricking them into making unintended requests. The vulnerability affects versions of Ultimate Coming Soon & Maintenance from n/a through 1.0.9. Successful exploitation can lead to unauthorized modifications or data theft, posing a significant risk to website security. Users are advised to update to the latest version or implement appropriate CSRF countermeasures to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.