CVE-2024-11205

🗓️ 10 Dec 2024 04:34:47Reported by CirclType

circl

circl🔗 cve.circl.lu👁 6 Views

CVE-2024-11205 details observed from various sources on December 10 and 11, 2024.

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the wpforms_is_admin_page() function in the WPForms plugin of the WordPress content management system allows a hacker to gain unauthorized access to read and modify data.	18 Dec 202400:00	–	bdu_fstec
CNNVD	WordPress plugin WPForms 安全漏洞	10 Dec 202400:00	–	cnnvd
CVE	CVE-2024-11205	10 Dec 202404:23	–	cve
Cvelist	CVE-2024-11205 WPForms 1.8.4 - 1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation	10 Dec 202404:23	–	cvelist
EUVD	EUVD-2024-34017	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11205	10 Dec 202405:15	–	nvd
OpenVAS	WordPress WPForms Contact Form Plugin 1.8.4 < 1.9.2.2 Missing Authorization Vulnerability	12 Dec 202400:00	–	openvas
OSV	CVE-2024-11205	10 Dec 202405:15	–	osv
Patchstack	WordPress WPForms plugin 1.8.4-1.9.2.1 - Missing Authorization to Authenticated (Subscriber+) Payment Refund and Subscription Cancellation vulnerability	9 Dec 202417:05	–	patchstack
Positive Technologies	PT-2024-9554 · Stripe · Stripe	14 Nov 202400:00	–	ptsecurity

Source	Link
infosec	www.infosec.exchange/users/cve/statuses/113626663315453138
infosec	www.infosec.exchange/users/jbhall56/statuses/113634628688951353
mstdn	www.mstdn.ca/users/rfwaveio/statuses/113635698285102215
t	www.t.me/cvedetector/12480
t	www.t.me/itsec_news/4951
t	www.t.me/true_secator/6529

10 Dec 2024 04:34Current

9High risk

Vulners AI Score9

CVSS 3.16.5 - 8.5

EPSS0.00435

SSVC

cve-2024-11205 seen december 2024 infosec.exchange mstdn.ca