Input validation vulnerability in Under Construction / Maintenance Mode from Acurax 2.6

The Acurax plugin for WordPress, called “Under Construction / Maintenance Mode,” has a security issue where someone can pretend to have a different IP address. This vulnerability exists in all versions up to and including 2.6 because the plugin does not properly check the IP address or relies too heavily on information provided by the user. This means that someone without proper authorization can get past security measures.

Detected in:

Under Construction / Maintenance Mode from Acurax open vulnerable versions: >= * <= 2.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.