PT-2024-18080 · Acurax · Under Construction / Maintenance Mode

Name of the Vulnerable Software and Affected Versions: Under Construction / Maintenance Mode from Acurax plugin for WordPress versions up to, and including, 2.6 Description: The Under Construction / Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure. This...

WordPress Plugin Coming Soon Page & Maintenance Mode Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Coming Soon Page & Maintenance Mode Plugin <= 2.2.1 is vulnerable to Bypass Vulnerability

Software Coming Soon Page & Maintenance Mode Type Plugin Vulnerable versions = 2.2.1 Fixed in 2.2.2 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-1136 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3a68dbfd3e93 Credits Lucio Sá Required...

PT-2024-16933 · WordPress · The Coming Soon Page & Maintenance Mode

Name of the Vulnerable Software and Affected Versions: The Coming Soon Page & Maintenance Mode plugin for WordPress versions up to, and including, 2.2.1 Description: The issue arises from an improperly implemented URL check in the wpsm coming soon redirect function, allowing unauthorized access t...

WordPress Plugin Under Construction / Maintenance Mode from Acurax Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

Coming Soon Page & Maintenance Mode < 2.2.2 - Maintenance Mode Bypass

Description The plugin is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsmcomingsoonredirect function, allowing unauthenticated attackers to view a site with maintenance mode or coming-soon mode enabled to view the site's content...

WordPress Maintenance Page Plugin <= 1.0.8 is vulnerable to Broken Access Control

Software Maintenance Page Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1370 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d5a894ccce46 Credits Francesco Carlucci Required...

WordPress Maintenance Page Plugin <= 1.0.8 is vulnerable to Bypass Vulnerability

Software Maintenance Page Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-1462 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 71b6077c6442 Credits Francesco Carlucci Required privileg...

SUSE-RU-2024:0560-1 Recommended update for Java

This update for Java fixes the following issues: plexus-archiver was updated from version 4.2.1 to 4.8.0: - Changes of 4.8.0: Security issues fixed: + CVE-2023-37460: Avoid override target symlink by standard file in AbstractUnArchiver bsc1215973 New features and improvements: + Added tzst alias...

Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API

Description The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. This makes it possible for unauthenticated attackers to view post titles and content when the site is in maintenance mode...

Maintenance Page < 1.0.9 - Missing Authorization to Sensitive Information Exposure

Description The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribedownload function hooked via AJAX action in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with...

CVE-2024-1472 WP Maintenance <= 6.1.6 - Information Exposure

The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page content via REST API...

CVE-2024-1472

The CVE-2024-1472 entry covers WP Maintenance for WordPress. Affected versions are up to 6.1.6, where an information-exposure flaw in the REST API allows unauthenticated actors to bypass maintenance mode and retrieve post/page content. The issue is confirmed by multiple sources in the Connected d...

CVE-2024-1472 WP Maintenance <= 6.1.6 - Information Exposure

The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page content via REST API...

CVE-2024-1475

CVE-2024-1475 affects the WordPress plugin Coming Soon Maintenance Mode up to version 1.0.5. Root cause: Sensitive Information Exposure via the REST API that allows unauthenticated attackers to retrieve post/page content, bypassing plugin protection. Impact: unauthorized data disclosure of site c...

WordPress Coming Soon Maintenance Mode Plugin <= 1.0.5 is vulnerable to Sensitive Data Exposure

Software Coming Soon Maintenance Mode Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1475 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6da3f77ac231 Credits Francesco...

PT-2024-18079 · WordPress · Wp Maintenance Mode & Coming Soon

Name of the Vulnerable Software and Affected Versions: Coming Soon Maintenance Mode plugin for WordPress versions up to, and including, 1.0.5 Description: The issue allows unauthenticated attackers to obtain post and page content, thus bypassing the protection provided by the plugin, via the REST...

PT-2024-18076 · WordPress · Wp Maintenance

Name of the Vulnerable Software and Affected Versions: WP Maintenance plugin for WordPress versions up to, and including, 6.1.6 Description: The issue allows unauthenticated attackers to bypass the plugin's maintenance mode and obtain post and page content via the REST API. Recommendations: For W...

WordPress WP Maintenance Plugin <= 6.1.6 is vulnerable to Sensitive Data Exposure

Software WP Maintenance Type Plugin Vulnerable versions = 6.1.6 Fixed in 6.1.7 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1472 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 1d4373c9ff44 Credits Francesco Carlucci Required...

The vulnerability of Canon’s imageCLASS MF, imageCLASS LBP, and i-SENSYS MF printer software relates to the recording beyond buffer boundaries, allowing attackers to execute arbitrary code or trigger malfunctions.

The vulnerability of Canon’s imageCLASS MF, imageCLASS LBP, and i-SENSYS MF printer software lies in the fact that it allows for code execution outside of the buffer boundaries. Exploiting this vulnerability could enable a malicious actor to execute arbitrary code or cause malfunctions during...