CVE-2024-30480 WordPress CGC Maintenance Mode plugin <= 1.2 - IP Filtering Bypass vulnerability
Attackers can bypass IP filtering restrictions in the CGC Maintenance Mode plugin to access restricted functionality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-30480?
CVE-2024-30480 is a low-severity authentication bypass vulnerability in Pippin Williamson CGC Maintenance Mode, published on 17 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.This issue affects CGC Maintenance Mode: from n/a through 1.2.
Weakness: CWE-290
Which versions are affected by CVE-2024-30480?
How do I fix CVE-2024-30480?
No fix has been published for CVE-2024-30480 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-30480 being exploited?
There is no known exploitation of CVE-2024-30480 in the wild and no public exploit code.
Sources
Also known as GHSA-9x9h-w57w-jv86.