Lucene search
PRIOn knowledge basePRION:CVE-2024-1462HistoryMar 13, 2024 - 4:15 p.m.
Code injection
2024-03-1316:15:00
PRIOn knowledge base
www.prio-n.com
4
wordpress
maintenance page plugin
vulnerability
rest api
unauthenticated access
post titles
content
The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. This makes it possible for unauthenticated attackers to view post titles and content when the site is in maintenance mode.
Related
cve
cve
CVE-2024-1462
2024-03-13 16:15:22
nvd
nvd
CVE-2024-1462
2024-03-13 16:15:22
wpvulndb
wpvulndb
Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API
2024-02-21 00:00:00
cvelist
cvelist
CVE-2024-1462
2024-03-13 15:26:53
wordfence
wordfence