PT-2024-18081 · WordPress · Easy Maintenance Mode
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Easy Maintenance Mode plugin for WordPress versions up to, and including, 1.4.2
Description
The issue allows authenticated attackers to obtain post and page content via the REST API, bypassing the protection provided by the plugin.
Recommendations
For versions up to, and including, 1.4.2, update to a version higher than 1.4.2 to resolve the issue.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Easy Maintenance Mode