CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a through 2.6.
Explanation of Vulnerability in Simple Terms
The Under Construction / Maintenance Mode plugin for WordPress contains an authentication bypass vulnerability. An attacker can access sensitive information without proper credentials by exploiting weak authentication checks. The vulnerability requires specific conditions to exploit but can expose confidential data. Update to a version newer than 2.6.
What an attacker can do
Read sensitive information without authentication.
Potential impact on your site
Unauthorized users may access private site data or configuration details.
Conditions required to exploit
Network access; specific conditions must be met to trigger the vulnerability.
Key dates
External resources
Related vulnerabilities
