CVE-2024-1472: WP Maintenance <= 6.1.6 - Information Exposure
The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page content via REST API.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-1472?
CVE-2024-1472 has a medium severity rating due to information exposure vulnerabilities.
How do I fix CVE-2024-1472?
To fix CVE-2024-1472, update the WP Maintenance plugin to version 6.1.7 or higher.
What versions are affected by CVE-2024-1472?
CVE-2024-1472 affects all versions of the WP Maintenance plugin up to and including 6.1.6.
Who can exploit CVE-2024-1472?
Unauthenticated attackers can exploit CVE-2024-1472 to access post and page content through the REST API.
What is the risk if CVE-2024-1472 is not mitigated?
If not mitigated, CVE-2024-1472 may lead to unauthorized access to sensitive content on affected WordPress sites.