CVE-2023-49741: 
WordPress vulnerability analysis and mitigation

The CVE-2023-49741 is an Authentication Bypass by Spoofing vulnerability affecting the WordPress plugin 'Coming soon and Maintenance mode' versions through 3.7.3. The vulnerability was discovered by researcher Kévin Mosbahi (Mika) and was publicly disclosed on December 1, 2023 (Patchstack).

The vulnerability is classified as an IP Filtering Bypass vulnerability with a CVSS v3.1 Base Score of 3.7 (Low) and vector string CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N. The issue is related to Authentication Bypass by Spoofing (CWE-290) and allows accessing functionality not properly constrained by ACLs (NVD).

The vulnerability could allow a malicious actor to bypass certain restrictions in the code. While classified as low severity, it potentially enables unauthorized access to functionality that should be restricted (Patchstack).

The vulnerability is unauthenticated, meaning it can be exploited without requiring any authentication. However, the CVSS scoring indicates high attack complexity (AC:H), suggesting that specific conditions need to be met for successful exploitation (Patchstack).

The vulnerability has been fixed in version 3.7.4 of the Coming soon and Maintenance mode plugin. Users are advised to update to version 3.7.4 or later to remove the vulnerability (Patchstack).