CVE-2023-29235: 
WordPress vulnerability analysis and mitigation

A Cross-Site Request Forgery (CSRF) vulnerability was identified in the WordPress Maintenance Switch plugin versions 1.5.2 and below. The vulnerability was discovered on April 4, 2023, and was assigned the identifier CVE-2023-29235. This security issue affects the WordPress plugin Maintenance Switch and received a CVSS score of 5.4, indicating a medium severity level (Patchstack).

The vulnerability is classified as a Cross-Site Request Forgery (CSRF) issue with a CVSS v3.1 score of 5.4 (Medium) and vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. The vulnerability falls under the OWASP Top 10 category A5: Broken Access Control. The issue can be exploited by unauthenticated attackers (Patchstack).

This vulnerability could allow malicious actors to force higher privileged users to execute unwanted actions under their current authentication. The security issue has been assessed as having a low severity impact and is considered unlikely to be exploited (Patchstack).

As of the latest reports, no official fix is available for this vulnerability. The issue remains unpatched in version 1.5.2 and below of the Maintenance Switch plugin (Patchstack).