Re: WordPress Plugin "Under Construction & Maintenance Mode": Exposed debug functionality

[Moritz Mühlenhoff <jmm () inutil org>]

mohammed gaming 222 wrote:
> Hello OSS-Security Team,
>
> I would like to responsibly disclose a security vulnerability identified in
> the WordPress plugin *Under Construction & Maintenance Mode*.

Mohammed, this is not a criticism to you personally, I assume this
was posted in good faith.

But on a more general level, please let's avoid posting WordPress plugin
vulnerabilities on oss-sec.

Looking at the Debian Security Tracker there are have been 9773 CVE IDs
on WordPress plugins in 2025, they are not packaged in any Linux
distribution and posting a few individual ones really misses the
"There has to be desirable information for others in the Open Source
community" aspect of the list charter.

Cheers,
        Moritz