Lucene search
HistoryJun 09, 2024 - 7:15 p.m.
CVE-2024-35661
wpforms
softlab
upload fields
authorization
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.1%
Missing Authorization vulnerability in SoftLab Upload Fields for WPForms.This issue affects Upload Fields for WPForms: from n/a through 1.0.2.
Affected configurations
Node
softlabbdupload_fields_for_wpformsRange≤1.0.2wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| softlabbd | upload_fields_for_wpforms | * | cpe:2.3:a:softlabbd:upload_fields_for_wpforms:*:*:*:*:*:wordpress:*:* |
Related
cvelist
cvelist
cve
cve
CVE-2024-35661
2024-06-09 19:15:51
vulnrichment
vulnrichment
wpvulndb
wpvulndb
Upload Fields for WPForms <= 1.0.2 - Missing Authorization
2024-06-11 00:00:00
wordfence
wordfence
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.1%
Related for NVD:CVE-2024-35661