Lucene search

K
cvelistPatchstackCVELIST:CVE-2024-32951
HistoryApr 24, 2024 - 6:59 a.m.

CVE-2024-32951 WordPress Max Addons Pro for Bricks plugin <= 1.6.1 - Unauthenticated Plugin Settings Reset vulnerability

2024-04-2406:59:03
CWE-862
Patchstack
www.cve.org
wordpress
max addons pro
bricks
vulnerability
unauthenticated
settings reset

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.0%

Missing Authorization vulnerability in BloomPixel Max Addons Pro for Bricks.This issue affects Max Addons Pro for Bricks: from n/a through 1.6.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Max Addons Pro for Bricks",
    "vendor": "BloomPixel",
    "versions": [
      {
        "changes": [
          {
            "at": "1.6.2",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.6.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.0%

Related for CVELIST:CVE-2024-32951