WordPress Plugin Coming Soon Maintenance Mode Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin WP Maintenance Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

CVE-2024-1136

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsmcomingsoonredirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a...

CVE-2024-1476

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mo...

CVE-2024-1476

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mo...

CVE-2024-1136

The Coming Soon Page & Maintenance Mode plugin for WordPress is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsmcomingsoonredirect function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to view a...

Design/Logic Flaw

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acxcsmasubscribeajax' function. This can allow authenticated attackers to extract sensitive data such as names and email...

CVE-2024-1476 Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mo...

WordPress Coming Soon Page & Maintenance Mode Plugin <= 2.2.1 is vulnerable to Bypass Vulnerability

Software Coming Soon Page & Maintenance Mode Type Plugin Vulnerable versions = 2.2.1 Fixed in 2.2.2 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-1136 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 3a68dbfd3e93 Credits Lucio Sá Required...

PT-2024-16933 · WordPress · The Coming Soon Page & Maintenance Mode

Name of the Vulnerable Software and Affected Versions: The Coming Soon Page & Maintenance Mode plugin for WordPress versions up to, and including, 2.2.1 Description: The issue arises from an improperly implemented URL check in the wpsm coming soon redirect function, allowing unauthorized access t...

WordPress Plugin Under Construction / Maintenance Mode from Acurax Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

PT-2024-18080 · Acurax · Under Construction / Maintenance Mode

Name of the Vulnerable Software and Affected Versions: Under Construction / Maintenance Mode from Acurax plugin for WordPress versions up to, and including, 2.6 Description: The Under Construction / Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure. This...

WordPress Plugin Coming Soon Page & Maintenance Mode Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Coming Soon Page & Maintenance Mode < 2.2.2 - Maintenance Mode Bypass

Description The plugin is vulnerable to unauthorized access of data due to an improperly implemented URL check in the wpsmcomingsoonredirect function, allowing unauthenticated attackers to view a site with maintenance mode or coming-soon mode enabled to view the site's content...

WordPress Maintenance Page Plugin <= 1.0.8 is vulnerable to Broken Access Control

Software Maintenance Page Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1370 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID d5a894ccce46 Credits Francesco Carlucci Required...

WordPress Maintenance Page Plugin <= 1.0.8 is vulnerable to Bypass Vulnerability

Software Maintenance Page Type Plugin Vulnerable versions = 1.0.8 Fixed in 1.0.9 OWASP Top 10 A4: Insecure Design Classification Bypass Vulnerability CVE CVE-2024-1462 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 71b6077c6442 Credits Francesco Carlucci Required privileg...

SUSE-RU-2024:0560-1 Recommended update for Java

This update for Java fixes the following issues: plexus-archiver was updated from version 4.2.1 to 4.8.0: - Changes of 4.8.0: Security issues fixed: + CVE-2023-37460: Avoid override target symlink by standard file in AbstractUnArchiver bsc1215973 New features and improvements: + Added tzst alias...

Maintenance Page < 1.0.9 - Missing Authorization to Sensitive Information Exposure

Description The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribedownload function hooked via AJAX action in all versions up to, and including, 1.0.8. This makes it possible for authenticated attackers, with...

Maintenance Page < 1.0.9 - Security Mechanism Bypass via REST API

Description The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. This makes it possible for unauthenticated attackers to view post titles and content when the site is in maintenance mode...

CVE-2024-1472 WP Maintenance <= 6.1.6 - Information Exposure

The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page content via REST API...