Maintenance Page

Maintenance Page has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Improper Access Control, behind 2 of the records (100%).

Every one of the 2 issues recorded for Maintenance Page has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Francesco Carlucci. Maintenance Page is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

01234567891007.11.2014Today21.02.20245.3Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure CVSS 5.3 · 21.02.20245.3Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API CVSS 5.3 · 21.02.2024

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Maintenance Page vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-1370

Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure

Read the full analysis

Vulnerability Records

2 records
Showing 1–2 of 2 reports
Maintenance Page banner
Latestv1.0.9

Maintenance Page

ThemeGrill

Author

ThemeGrill

4.4(18)
88/100
Last Updated
2024-02-19 (3y ago)
Active Installs
3,000+
Downloads
104,161
Requires WP
3.4+
Requires PHP
0+
Tested up to
WP 6.4.10
Created
2014-11-07 (12y ago)

Allows you to quickly create a maintenance/coming-soon page. You can use this plugin whenever your site is down for maintenance, currently going any upgrade or is in development. Built in options panel to add logo, background image, social icons, color, subscribe field and many more. Get free support at http://themegrill.com/support-forum/ check the demo at http://themegrill.com/plugins/maintenance-page/ Features And Options: Responsive design looks great on your devices. Logo Upload Background image/color option Subscriber Feature to collect emails Download subscriber list as csv Social icons Font Color option Add title, text message option Option to exclude page Custom CSS Maintenance Page Pro: Counter Contact Form MailChimp integration Ip Whitelist Background Slider Background Video Progress Bar Google font option Analytic Code Option Role Based access Font size option About Page Upgrade to Maintenance Page Pro &raquo; View Maintenance Page Pro &raquo;

View on WordPress.org

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C