CVE-2024-45453 LOW

CVE-2024-45453: WordPress Maintenance Redirect plugin <= 2.0.1 - IP Bypass vulnerability

Vendor Peter Hardy-Vandoorn
Product Maintenance Redirect
Weakness CWE-290
Published September 23, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

3.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect jf3-maintenance-mode.This issue affects Maintenance Redirect: from n/a through <= 2.0.1.

Explanation of Vulnerability in Simple Terms

02Summary

Maintenance Redirect versions 2.0.1 and earlier contain an authentication bypass vulnerability. An attacker on the network can access sensitive information without authentication or user interaction. The vulnerability has low confidentiality impact and affects the confidentiality of data handled by the component.

What an attacker can do

03Attacker Capabilities

Read sensitive information without logging in.

Potential impact on your site

04Site Impact

Sensitive data may be exposed to unauthenticated attackers on the network.

Conditions required to exploit

05Prerequisites

Network access; no authentication or user interaction required.

Key dates

06Disclosure timeline

September 23, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

08Related CVE

CVE-2023-51543 WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability CVE-2023-51542 WordPress Branda plugin <= 3.4.14 - IP Restriction Bypass vulnerability CVE-2024-33917 WordPress WTI Like Post plugin <= 1.4.6 - IP Restriction Bypass Vulnerability vulnerability CVE-2024-35749 WordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability CVE-2025-32275 WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability