CVE-2024-1478mediumCWE-284

CVE-2024-1478: medium-severity vulnerability in helderk Maintenance Mode

Maintenance Mode <= 3.0.1 - Information Exposure

Published · Updated

Follow this CVE+ Monitor Maintenance Mode

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.5%
The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.1 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content via API thus bypassing the content protection provided by the plugin.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
helderk · Maintenance Mode
Related CVEs — helderk Maintenance Mode

In the same product, most dangerous first.

CVE-2024-32708LOWWordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerabilityEPSS 0.4%