Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-24833
HistoryMay 08, 2024 - 1:28 p.m.

CVE-2024-24833 WordPress Happy Addons for Elementor plugin <= 3.10.1 - Broken Access Control on Post Clone vulnerability

2024-05-0813:28:22
CWE-862
Patchstack
www.cve.org
3
cve-2024-24833
wordpress
happy addons
elementor
broken access control
post clone
missing authorization

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Missing Authorization vulnerability in Leevio Happy Addons for Elementor.This issue affects Happy Addons for Elementor: from n/a through 3.10.1.

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "happy-elementor-addons",
    "product": "Happy Addons for Elementor",
    "vendor": "Leevio",
    "versions": [
      {
        "changes": [
          {
            "at": "3.10.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.10.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-24833