High · 7.1 CVE-2023-39926 EUVD-2023-43624GHSA-qh33-c8m9-ggwr

WordPress Under Construction / Maintenance Mode from Acurax Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)

Published Nov 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Acurax Under Construction / Maintenance Mode from Acurax plugin <= 2.6 versions.

Vendor	Product	Affected	Fixed
Acurax	Under Construction / Maintenance Mode from Acurax	≤ 2.6	—