WordPress Plugin Vulnerabilities

Coming Soon, Under Construction & Maintenance Mode By Dazzler < 2.1.3 - Maintenance Mode Bypass

Description

The plugin is vulnerable to maintenance mode bypass due to the plugin relying on the REQUEST_URI to determine if the page being accesses is an admin area. This makes it possible for unauthenticated attackers to bypass maintenance mode and access the site which may be considered confidential when in maintenance mode.

Affects Plugins

Fixed in 2.1.3

References

Classification

Type
NO AUTHORISATION
CWE

Miscellaneous

Original Researcher
Lucio Sá
Verified
No

Timeline

Publicly Published
2024-03-19 (about 2 years ago)
Added
2024-03-19 (about 2 years ago)
Last Updated
2024-04-01 (about 2 years ago)

Other