What is CVE-2024-0789?

CVE-2024-0789 is a medium-severity vulnerability in Florent73 Wp Maintenance, classified under CWE-348. CVSS score: 5.3/10. Published 2024-06-19.

How severe is CVE-2024-0789?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Florent73 Wp Maintenance

CVE-2024-0789

The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9.2 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to bypass maintenance mode.

EPSS: 0.003 (17.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Florent73 Wp Maintenance — versions 0

Weakness classification (CWE)

CWE-348

References

security@wordfence.com
security@wordfence.com

Frequently asked questions

What is CVE-2024-0789?: CVE-2024-0789 is a medium-severity vulnerability in Florent73 Wp Maintenance, classified under CWE-348. CVSS score: 5.3/10. Published 2024-06-19.
How severe is CVE-2024-0789?: Medium severity. CVSS v3 base score is 5.3 out of 10.