CVE-2024-1476

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-1476
The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mode is active thus bypassing the protection provided by the plugin.
CVSS

No CVSS.

References
Link Resource
https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ Product
https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve Third Party Advisory
https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:acurax:under_construction_/_maintenance_mode:*:*:*:*:*:*:*:*
History

04 Mar 2025, 12:24

Type Values Removed Values Added
CPE cpe:2.3:a:acurax:under_construction_/_maintenance_mode:*:*:*:*:*:*:*:*
First Time Acurax
Acurax under Construction / Maintenance Mode
References () https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve - () https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve - Third Party Advisory
References () https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ - () https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ - Product

28 Feb 2024, 09:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-28 09:15

Updated : 2025-03-04 12:24

NVD link : CVE-2024-1476

Mitre link : CVE-2024-1476

JSON object : View

Products Affected

acurax

  • under_construction_/_maintenance_mode
CWE

No CWE.