Acurax

acurax

6 CVEs • 3 products

Products (3)

Click to collapse

Toggle

Under Construction / Maintenance Mode

under_construction_/_maintenance_mode

Social Media Widget

social_media_widget

Floating Social Media Icon

floating_social_media_icon

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-35749 1Acurax 1Under Construction / Maintenance Mode Nov 21, 2024 Jun 10, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a thro...Show more Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a through 2.6.Show less
CVE-2024-1476 1Acurax 1Under Construction / Maintenance Mode Apr 8, 2026 Feb 28, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenti...Show more The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6 via the REST API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages when maintenance mode is active thus bypassing the protection provided by the plugin.Show less
CVE-2023-6922 1Acurax 1Under Construction / Maintenance Mode Apr 8, 2026 Feb 28, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow...Show more The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.Show less
CVE-2023-39926 1Acurax 1Under Construction / Maintenance Mode Nov 21, 2024 Nov 16, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin <= 2.6 versions.
CVE-2021-36843 1Acurax 1Floating Social Media Icon Nov 21, 2024 Nov 26, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Floating Social Media Icon plugin (versions <= 4.3.5) Social Media Configuration form. Requires high role user like admin.
CVE-2018-6357 1Acurax 1Social Media Widget Jun 17, 2026 Jan 27, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widge...Show more The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widget_icon_array_order XSS.Show less