CVE-2024-43944 – WordPress Maintenance & Coming Soon Redirect Animation plugin <= 2.1.3 - IP Bypass vulnerability

https://notcve.org/view.php?id=CVE-2024-43944

Incorrect Authorization vulnerability in Yassine Idrissi Maintenance & Coming Soon Redirect Animation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maintenance & Coming Soon Redirect Animation: from n/a through 2.1.3. The Maintenance & Coming Soon Redirect Animation plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.1.3 due to insufficient IP address validation and/or use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to bypass IP restrictions. • https://patchstack.com/database/vulnerability/maintenance-coming-soon-redirect-animation/wordpress-maintenance-coming-soon-redirect-animation-plugin-2-1-3-ip-bypass-vulnerability?_s_id=cve • CWE-348: Use of Less Trusted Source CWE-863: Incorrect Authorization •