CVE-2023-6922: Acurax Under Construction / Maintenance Mode

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Under Construction / Maintenance Mode from Acurax plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.6 via the 'acx_csma_subscribe_ajax' function. This can allow authenticated attackers to extract sensitive data such as names and email addresses of subscribed visitors.

Affected products

• Acurax Under Construction / Maintenance Mode: up to and including 2.6

Published 2024-02-28. Last modified 2026-06-17.