Lucene search

CVE-2024-32821

🗓️ 09 Jun 2024 13:53:15Reported by PatchstackType

Missing Authorization vulnerability in TotalSuite Total Poll Lite from n/a through 4.9.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-32821 WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability	9 Jun 202412:16	–	vulnrichment
Patchstack	WordPress Total Poll Lite Plugin <= 4.9.9 is vulnerable to Broken Access Control	22 Apr 202400:00	–	patchstack
WPVulnDB	Total Poll Lite < 4.10.0 - Missing Authorization	29 Apr 202400:00	–	wpvulndb
Cvelist	CVE-2024-32821 WordPress Total Poll Lite plugin <= 4.9.9 - Broken Access Control vulnerability	9 Jun 202412:16	–	cvelist
NVD	CVE-2024-32821	9 Jun 202413:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)	2 May 202414:49	–	wordfence

Vulners

Node

totalsuite total_poll_liteRange≤4.9.9wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "totalpoll-lite",
    "product": "Total Poll Lite",
    "vendor": "TotalSuite",
    "versions": [
      {
        "changes": [
          {
            "at": "4.10.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "4.9.9",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/totalpoll-lite/wordpress-total-poll-lite-plugin-4-9-9-broken-access-control-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jun 2024 13:15Current

4.6Medium risk

Vulners AI Score4.6

CVSS34.3

EPSS0.00139

SSVC

CWE-862