Sensitive Information Exposure Vulnerability in Acurax Under Construction / Maintenance Mode Plugin for WordPress
CVE-2023-6922
6.5MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 28 February 2024
What is CVE-2023-6922?
The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.
Affected Version(s)
Under Construction / Maintenance Mode from Acurax * <= 2.6