WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-39926

What is CVE-2023-39926?

The Acurax Under Construction / Maintenance Mode Plugin version 2.6 and earlier are susceptible to a stored cross-site scripting vulnerability. This issue allows attackers to inject malicious scripts, which can be executed in the context of a user's browser. If exploited, this vulnerability may lead to unauthorized access to sensitive information and manipulation of web page content, potentially compromising the security of the affected website. Site operators are urged to update the plugin immediately to mitigate any associated risks.

References