Read the docs

Acurax

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Acurax records in CISA KEV

No Acurax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Under Construction / Maintenance Mode 4 records MEDIUM Floating Social Media Icon 1 record LOW Social Media Widget 1 record LOW

Records

6 records

TI-2018-04679 CVE-2018-6357 · GHSA-7v6m-79qx-mc6q

The acx_asmw_saveorder_callback function in function.php in the…

Priority LOW 39

The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widge…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00649 Published 2018-01-27 No fix listed CWE-352
TI-2023-06325 CVE-2023-6922 · GHSA-3r9p-rc57-36hr

Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure

Priority LOW 29

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00494 Published 2024-02-28 No fix listed CWE-200
TI-2024-23618 CVE-2024-35749 · GHSA-hgwf-5rc9-7vr3

WordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability

Priority LOW 24

Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a thro…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00297 Published 2024-06-10 No fix listed CWE-290
Open these records in search →