CVE-2026-34896

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-34896", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2026-03-31T09:57:35.161Z", "datePublished": "2026-04-07T08:20:42.775Z", "dateUpdated": "2026-04-07T13:37:48.429Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-07T08:20:42.775Z"}, "title": "WordPress Under Construction, Coming Soon & Maintenance Mode plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}], "affected": [{"vendor": "Analytify", "product": "Under Construction, Coming Soon & Maintenance Mode", "collectionURL": "https://wordpress.org/plugins", "packageName": "under-construction-maintenance-mode", "versions": [{"status": "affected", "version": "n/a", "lessThanOrEqual": "2.1.1", "changes": [{"at": "2.1.2", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon &amp; Maintenance Mode allows Cross Site Request Forgery.<p>This issue affects Under Construction, Coming Soon &amp; Maintenance Mode: from n/a through 2.1.1.</p>"}]}], "tags": ["x_open-source"], "references": [{"url": "https://patchstack.com/database/wordpress/plugin/under-construction-maintenance-mode/vulnerability/wordpress-under-construction-coming-soon-maintenance-mode-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "Update the WordPress Under Construction, Coming Soon & Maintenance Mode Plugin to the latest available version (at least 2.1.2).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Update the WordPress Under Construction, Coming Soon & Maintenance Mode Plugin to the latest available version (at least 2.1.2)."}]}], "credits": [{"lang": "en", "value": "Carlos Ferreira | Patchstack Bug Bounty Program", "user": "00000000-0000-4000-9000-000000000000", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-07T13:36:54.828648Z", "id": "CVE-2026-34896", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-07T13:37:48.429Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-34896", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2026-03-31T09:57:35.161Z", "datePublished": "2026-04-07T08:20:42.775Z", "dateUpdated": "2026-04-07T13:37:48.429Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-07T08:20:42.775Z"}, "title": "WordPress Under Construction, Coming Soon & Maintenance Mode plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}], "affected": [{"vendor": "Analytify", "product": "Under Construction, Coming Soon & Maintenance Mode", "collectionURL": "https://wordpress.org/plugins", "packageName": "under-construction-maintenance-mode", "versions": [{"status": "affected", "version": "n/a", "lessThanOrEqual": "2.1.1", "changes": [{"at": "2.1.2", "status": "unaffected"}], "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon &amp; Maintenance Mode allows Cross Site Request Forgery.<p>This issue affects Under Construction, Coming Soon &amp; Maintenance Mode: from n/a through 2.1.1.</p>"}]}], "tags": ["x_open-source"], "references": [{"url": "https://patchstack.com/database/wordpress/plugin/under-construction-maintenance-mode/vulnerability/wordpress-under-construction-coming-soon-maintenance-mode-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "Update the WordPress Under Construction, Coming Soon & Maintenance Mode Plugin to the latest available version (at least 2.1.2).", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Update the WordPress Under Construction, Coming Soon & Maintenance Mode Plugin to the latest available version (at least 2.1.2)."}]}], "credits": [{"lang": "en", "value": "Carlos Ferreira | Patchstack Bug Bounty Program", "user": "00000000-0000-4000-9000-000000000000", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-34896", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-07T13:36:54.828648Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-07T13:37:13.684Z"}}]}}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "under-construction-maintenance-mode", "product": "Under Construction, Coming Soon & Maintenance Mode", "vendor": "Analytify", "versions": [{"changes": [{"at": "2.1.2", "status": "unaffected"}], "lessThanOrEqual": "2.1.1", "status": "affected", "version": "n/a", "versionType": "custom"}]}], "source": "audit@patchstack.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1."}, {"lang": "es", "value": "Vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en Analytify Under Construction, Coming Soon & Maintenance Mode permite la falsificaci\u00f3n de petici\u00f3n en sitios cruzados. Este problema afecta a Under Construction, Coming Soon & Maintenance Mode: desde n/a hasta 2.1.1."}], "id": "CVE-2026-34896", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "audit@patchstack.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-34896", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-07T13:36:54.828648Z", "version": "2.0.3"}}]}, "published": "2026-04-07T09:16:21.160", "references": [{"source": "audit@patchstack.com", "url": "https://patchstack.com/database/wordpress/plugin/under-construction-maintenance-mode/vulnerability/wordpress-under-construction-coming-soon-maintenance-mode-plugin-2-1-1-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-352"}], "source": "audit@patchstack.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.1.1]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Under Construction, Coming Soon & Maintenance Mode", "source": "cna", "vendor": "Analytify"}, "product": "under_construction,_coming_soon_&_maintenance_mode", "vendor": "analytify"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-04-07T10:20:31.444036+00:00", "value": {"mitigation_remediation": ["Upgrade the WordPress Under Construction, Coming Soon & Maintenance Mode Plugin to at least version 2.1.2"], "summary": {"action": "Patch", "impact": "Unauthorized Actions"}, "threat_synthesis": {"affected_systems": "The issue affects all releases of the Analytify Under Construction, Coming Soon & Maintenance Mode plugin up to and including version 2.1.1. Any installation running 2.1.1 or older is potentially vulnerable, regardless of additional plugins or theme configurations.", "description_and_impact": "The vulnerability is a Cross\u2011Site Request Forgery flaw in the Analytify Under Construction, Coming Soon & Maintenance Mode plugin. It allows a malicious actor to compel an authenticated WordPress user to execute unintended requests against the plugin, potentially altering the site\u2019s construction or maintenance configurations. The weakness is classified as CWE\u2011352 and does not provide remote code execution or other direct system compromise, but it can enable unauthorized configuration changes that could impact site availability or content delivery.", "risk_and_exploitability": "The CVSS base score of 7.5 indicates a high severity risk. Exploit probability information is not available, and the flaw is not listed in the CISA known exploited vulnerabilities catalog. Based on the description, the attack requires an authenticated user and the attacker must lure the victim into submitting a crafted request to the plugin. Successful exploitation does not enable remote code execution but can lead to unauthorized modifications to the site\u2019s construction or maintenance settings."}}}}, "created": "2026-04-07T09:36:17.045499+00:00", "updated": "2026-04-08T19:49:53.486978+00:00", "vendors": ["analytify", "analytify$PRODUCT$under_construction,_coming_soon_&_maintenance_mode", "wordpress", "wordpress$PRODUCT$wordpress"]}