Skip to content
OpenAdvisories

Product · webfactory

Under Construction

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-0832

    Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot

    The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the install_weglot function called via the admin_action_install_weglot acti…

    webfactory Under Construction Web / CMS
  • Medium 4.3
    CVE-2023-0831

    Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice

    The Under Construction plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.96. This is due to missing or incorrect nonce validation on the dismiss_notice function called via the admin_action_ucp_dismiss_notice …

    webfactory Under Construction Web / CMS