CVE-2024-6590 Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update

🗓️ 25 Sep 2024 02:05:24Reported by WordfenceType

Vulnerability in Spreadsheet Integration Plugin for WordPres

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Spreadsheet Integration 安全漏洞	25 Sep 202400:00	–	cnnvd
CVE	CVE-2024-6590	25 Sep 202402:05	–	cve
EUVD	EUVD-2024-47655	3 Oct 202520:07	–	euvd
NVD	CVE-2024-6590	25 Sep 202403:15	–	nvd
Patchstack	WordPress Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Plugin <= 3.8.0 is vulnerable to Broken Access Control	24 Sep 202400:00	–	patchstack
Patchstack	WordPress Spreadsheet Integration plugin <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update vulnerability	24 Sep 202412:54	–	patchstack
Positive Technologies	PT-2024-37742 · WordPress · Spreadsheet Integration Plugin For Wordpress	24 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-6590	23 May 202510:35	–	redhatcve
Vulnrichment	CVE-2024-6590 Spreadsheet Integration – Automate Google Sheets With WordPress, WooCommerce & Most Popular Form Plugins. Also, Display Google sheet as a Table. <= 3.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update	25 Sep 202402:05	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 23, 2024 to September 29, 2024)	3 Oct 202415:47	–	wordfence

[
  {
    "vendor": "javmah",
    "product": "WPGSI: Spreadsheet Integration",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "3.8.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php
plugins	www.plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d35ff2cc-9af2-4b72-bc49-e205275daa4d
plugins	www.plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php
plugins	www.plugins.trac.wordpress.org/browser/wpgsi/trunk/admin/class-wpgsi-admin.php

08 Apr 2026 17:25Current

CVSS 3.16.3

EPSS0.0013

CWE-862