CVE-2024-0789: WP Maintenance <= 6.1.9.2 - IP Spoofing to Maintenance Mode Bypass
The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to bypass maintenance mode.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0789?
CVE-2024-0789 has a high severity rating due to its potential for IP Address Spoofing.
How do I fix CVE-2024-0789?
To fix CVE-2024-0789, upgrade the WP Maintenance plugin to version 6.1.9.3 or later.
What systems are affected by CVE-2024-0789?
CVE-2024-0789 affects all versions of the WP Maintenance plugin up to and including 6.1.9.2.
Can CVE-2024-0789 be exploited remotely?
Yes, CVE-2024-0789 can be exploited remotely by an unauthenticated attacker.
What types of attacks can CVE-2024-0789 facilitate?
CVE-2024-0789 can facilitate various attacks such as bypassing IP restrictions and potential unauthorized access.