Threat Database

Threat Entry Updated 2026-10-26

Under Construction Maintenance Mode - Cross-Site Request Forgery (CSRF) (CVE-2026-34896)

Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1.

PLUGIN Under Construction Maintenance Mode

CVE-2026-34896

HIGH CVSS 7.5 2026-04-07

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Under Construction Maintenance Mode - Authentication Bypass (CVE-2024-35749)

Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a through 2.6.

PLUGIN Under Construction Maintenance Mode

CVE-2024-35749

LOW CVSS 3.7 2024-06-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Under Construction Maintenance Mode - Information Disclosure (CVE-2023-6922)

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.

PLUGIN Under Construction Maintenance Mode

CVE-2023-6922

MEDIUM CVSS 4.3 2024-02-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Under Construction Maintenance Mode - Cross-Site Scripting (XSS) (CVE-2023-39926)

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin

PLUGIN Under Construction Maintenance Mode

CVE-2023-39926

HIGH CVSS 7.1 2023-11-16

Risk Score

Open Full Technical Breakdown