WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-39926

What is CVE-2023-39926?

The Acurax Under Construction / Maintenance Mode Plugin version 2.6 and earlier are susceptible to a stored cross-site scripting vulnerability. This issue allows attackers to inject malicious scripts, which can be executed in the context of a user's browser. If exploited, this vulnerability may lead to unauthorized access to sensitive information and manipulation of web page content, potentially compromising the security of the affected website. Site operators are urged to update the plugin immediately to mitigate any associated risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References