Read the docs

Acurax

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Acurax records in CISA KEV

No Acurax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Under Construction / Maintenance Mode 4 records MEDIUM Floating Social Media Icon 1 record LOW Social Media Widget 1 record LOW

Records

4 records in Under Construction / Maintenance Mode · all components

TI-2023-06325 CVE-2023-6922 · GHSA-3r9p-rc57-36hr

Under Construction / Maintenance Mode from Acurax <= 2.6 - Authenticated (Subscriber+) Sensitive Information Exposure

Priority LOW 29

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00494 Published 2024-02-28 No fix listed CWE-200
TI-2024-23618 CVE-2024-35749 · GHSA-hgwf-5rc9-7vr3

WordPress Under Construction / Maintenance Mode from Acurax plugin <= 2.6 - IP Bypass vulnerability

Priority LOW 24

Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a thro…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00297 Published 2024-06-10 No fix listed CWE-290
Open these records in search →