Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-32708

WordPress Maintenance Mode plugin <= 3.0.1 - IP Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affects Maintenance Mode: from n/a through 3.0.1.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Helderk Wordpress
Products
Maintenance Mode Wordpress
CVE-2024-1478

Maintenance Mode <= 3.0.1 - Information Exposure

The Maintenance Mode plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.1 via the REST API. This makes it possible for unauthenticated attackers to obtain post and page content via API thus bypassing the content protection provided by the plugin.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Helderk
Products
Maintenance Mode