The Coming Soon & Maintenance Mode Page plugin for WordPress is vulnerable to security risks in versions up to and including 1.57. This means that someone could make a fake request to the website which could trick the site administrator into clicking a link or performing an action. To prevent this, the plugin needs to have something called nonce validation on the save_meta_box() function.