Really Simple Security logo

Log out
Get PRO

underConstruction

  • underConstruction on WordPress.org
  • Current version: 1.22
  • Last update: March 8, 2024
  • Known issues: Fixed
The plugin creates a "Coming Soon" page that is visible to all users who are not logged in, making it useful for developing a site on a live server without the world being able to see it. WordPress deals for your site can be found by clicking on the provided link.

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Input validation vulnerability in underConstruction 1.21

    Fixed

    A plugin called "underConstruction" used in WordPress has a security issue that allows harmful code to be inserted into pages. This can only happen if the attacker has special permissions and the web...

    Read More

  • Input validation vulnerability in underConstruction 1.20

    Fixed

    The WordPress plugin underConstruction

    Read More

  • Input validation vulnerability in underConstruction 1.18

    Fixed

    The underConstruction plugin for WordPress

    Read More

  • Input validation vulnerability in underConstruction 1.09

    Fixed

    Hackers can use a security flaw in the underConstruction plugin version 1.09 or earlier for WordPress to gain access to an administrator's account and deactivate the plugin.

    Read More

  • Input validation vulnerability in underConstruction 1.21

    Fixed

    The UnderConstruction WordPress plugin before version 1.21 had a security issue. It did not take steps to protect the ""Display a custom page using your own HTML"" setting before displaying it

    Read More