CVE-2023-6922 - Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure

Back Back to CVE browser

MEDIUM

Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure

Published Feb 28, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.

Affected products

Vendor Acurax Product Under Construction / Maintenance Mode from Acurax Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=2.6

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Acurax

Under Construction / Maintenance Mode from Acurax

unaffected

Version	Status	Constraints
0	affected	<=2.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

Link	Providers	Tags
https://plugins.trac.wordpress.org/browser/coming-soon-maintenance-mode-from-acurax/trunk/function.php?rev=2539156#L612		Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/2a75f4eb-698b-4c92-9829-de6c55e21ecb?source=cve		Third Party Advisory