CVE-2024-1476

CVE-2024-1476 affects the Under Construction / Maintenance Mode plugin for WordPress by Acurax. The vulnerability allows unauthenticated users to retrieve post/page contents via the REST API when maintenance mode is active, exposing sensitive information in all versions up to 2.6. Root cause is i...

WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Sensitive Data Exposure

Software Under Construction / Maintenance Mode from Acurax Type Plugin Vulnerable versions = 2.6 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1476 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID a5fbf06afa48...