WP Maintenance, CVE-2024-1472

CVE, Research URL: CVE-2024-1472
Home page URL: Security reports for WP Maintenance
Application: WP Maintenance
Published on: Feb 29, 2024
Research Description: The WP Maintenance plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.1.6 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's maintenance mode obtain post and page content via REST API.
Affected versions: Min -, max 6.1.7.
Status: vulnerable