CVE-2024-1181

CVE-2024-1181 applies to the WordPress plugin Coming Soon, Under Construction & Maintenance Mode By Dazzler. All versions up to 2.1.2 are vulnerable because the plugin uses REQUEST_URI to decide if a page is in admin area, allowing unauthenticated attackers to bypass maintenance mode. Remediation...

CVE-2024-1181 Coming Soon, Under Construction & Maintenance Mode By Dazzler <= 2.1.2 - Maintenance Mode Bypass

The Coming Soon, Under Construction & Maintenance Mode By Dazzler plugin for WordPress is vulnerable to maintenance mode bypass in all versions up to, and including, 2.1.2. This is due to the plugin relying on the REQUESTURI to determine if the page being accesses is an admin area. This makes it...