CVE-2024-1462CWE-284

Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API

Medium · published March 13, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
44.0
In the wild
Unconfirmed
What it is

The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. This makes it possible for unauthenticated attackers to view post titles and content when the site is in maintenance mode.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00530 · 44.0th percentile
Weakness
CWE-284 · Improper Access Control
Published
2024-03-13T15:26Z
EPSS history
Timeline
  • 13 MAR 15:26Z
    Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API
    cvelistv5