The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mode is active thus bypassing the protection provided by the plugin.
References
Configurations
History
08 Apr 2026, 19:20
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:acurax:under_construction_\/_maintenance_mode:*:*:*:*:*:*:*:* | |
| First Time |
Acurax
Acurax under Construction \/ Maintenance Mode |
|
| References | () https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ - Product | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve - Third Party Advisory | |
| CWE | CWE-284 NVD-CWE-noinfo |
21 Nov 2024, 08:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wordpress.org/plugins/coming-soon-maintenance-mode-from-acurax/ - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/f28c47e6-a37d-4328-afb2-6a9e6b3fe20a?source=cve - |
28 Feb 2024, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-28 09:15
Updated : 2026-04-08 19:20
NVD link : CVE-2024-1476
Mitre link : CVE-2024-1476
CVE.ORG link : CVE-2024-1476
JSON object : View
Products Affected
acurax
- under_construction_\/_maintenance_mode
CWE