← WordPress Vulnerabilities
WordPress security by component

Maintenance Page

Maintenance Page displays a maintenance page while a WordPress website is being prepared or updated.

Maintenance Page (maintenance-page) is a WordPress plugin with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 13, 2024; the highest published CVSS base score is 5.3.

Plugin slug: maintenance-page

CVE-2024-1462: Maintenance Page: A security weakness

Maintenance Page is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedMar 13, 2024
Safe version guidanceSee mitigation notes
Published vulnerabilities for maintenance-page
Safe version
Mar 13, 2024 CVE-2024-1462
Maintenance Page: A security weakness
Maintenance Page is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
Mar 13, 2024 CVE-2024-1370
Maintenance Page: A security weakness
Maintenance Page is affected by a security weakness. Exploitation requires an authenticated subscriber account. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3