CVE-2024-1476: medium-severity vulnerability in acurax Under Construction / Maintenance Mode…
Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.5%
The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mode is active thus bypassing the protection provided by the plugin.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
acurax · Under Construction / Maintenance Mode from AcuraxRelated CVEs — acurax Under Construction / Maintenance Mode…
In the same product, most dangerous first.