CVE-2023-6922

MEDIUM 6.5CVE-2023-6922 · Published 28/02/2024 · updated 17/06/2026

In short

CVE-2023-6922 is a MEDIUM (CVSS 6.5) vulnerability affecting under construction / maintenance mode (acurax).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
under construction / maintenance mode acurax	`≤ 2.6`	No fix yet

Description

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.

References

plugins.trac.wordpress.org/browser/coming-soon-maintenance-mode-from-acurax/trunk/function.php · Product
wordfence.com/threat-intel/vulnerabilities/id/2a75f4eb-698b-4c92-9829-de6c55e21ecb · Third Party Advisory

More vulnerabilities in under construction / maintenance mode

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

under construction / maintenance mode

acurax

≤ 2.6

No fix yet

Description

More vulnerabilities in under construction / maintenance mode

See all →