CVE-2024-22139 LOW

CVE-2024-22139: WordPress WordPress Manutenção plugin <= 1.0.6 - Bypass vulnerability

Vendor Filipe Seabra
Product WordPress Manutenção
Weakness CWE-290
Published May 17, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Authentication Bypass by Spoofing vulnerability in Filipe Seabra WordPress Manutenção allows Functionality Bypass.This issue affects WordPress Manutenção: from n/a through 1.0.6.

Explanation of Vulnerability in Simple Terms

02Summary

WordPress Manutenção plugin versions up to 1.0.6 contain an authentication bypass vulnerability. An attacker on the network can access sensitive information without valid credentials by exploiting improper authentication checks. The vulnerability has low confidentiality impact and requires specific conditions to exploit. Update to a version newer than 1.0.6 to remediate.

What an attacker can do

03Attacker Capabilities

Read sensitive information without providing valid login credentials.

Potential impact on your site

04Site Impact

Unauthorized users may access non-public data exposed by the plugin without logging in.

Conditions required to exploit

05Prerequisites

Network access to the site; no user interaction or authentication required.

Key dates

06Disclosure timeline

May 17, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2024-43944 WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.3.3 - Bypass Vulnerability vulnerability CVE-2023-48271 WordPress Maspik – Spam Blacklist plugin <= 0.10.3 - IP Filtering Bypass vulnerability CVE-2023-49741 WordPress Coming soon and Maintenance mode plugin <= 3.7.3 - IP Filtering Bypass vulnerability CVE-2024-32827 WordPress Giveaways and Contests by RafflePress plugin <= 1.12.7 - IP Restriction Bypass vulnerability CVE-2024-25906 WordPress Comments Like Dislike plugin <= 1.2.2 - IP Restriction Bypass Vulnerability vulnerability