Design/Logic Flaw

2024-02-2809:15:00

PRIOn knowledge base

www.prio-n.com

under construction

maintenance mode

sensitive information exposure

acurax plugin

wordpress

authenticated attackers

data extraction

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the ‘acx_csma_subscribe_ajax’ function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.