WordPress Subscribe2 plugin <= 10.42 - Broken Access Control vulnerability

🗓️ 11 Apr 2024 11:24:01Reported by Dhabaleshwar Das (Patchstack Alliance)Type

patchstack

patchstack🔗 patchstack.com👁 6 Views

WordPress Subscribe2 plugin up to version 10.42 has a broken access control vulnerability.

Reporter	Title	Published	Views	Family All 33
CNNVD	WordPress plugin WpEvently 跨站请求伪造漏洞	11 Jun 202600:00	–	cnnvd
CVE	CVE-2024-32110	11 Jun 202607:05	–	cve
Cvelist	CVE-2024-32110 WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= 4.1.2 - Cross Site Request Forgery (CSRF) vulnerability	11 Jun 202607:05	–	cvelist
EUVD	EUVD-2024-55618	11 Jun 202607:05	–	euvd
NVD	CVE-2024-32110	11 Jun 202609:16	–	nvd
Patchstack	WordPress Unlimited Elementor Inner Sections By BoomDevs Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)	11 Apr 202400:00	–	patchstack
Patchstack	WordPress Exclusive Addons for Elementor plugin <= 2.6.9 - Broken Access Control vulnerability	11 Apr 202411:24	–	patchstack
Patchstack	WordPress Load More Anything Plugin <= 3.3.5 is vulnerable to Broken Access Control	11 Apr 202400:00	–	patchstack
Patchstack	WordPress Better Chat Support plugin <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability	11 Apr 202411:10	–	patchstack
Patchstack	WordPress Unlimited Elementor Inner Sections plugin <= 1.0.4 - Cross Site Request Forgery (CSRF) vulnerability	11 Apr 202411:19	–	patchstack

Vulners

Node

wordpress subscribe2Range≤10.42

11 Apr 2024 11:24Current

7High risk

Vulners AI Score7

EPSS0.001

WordPress Subscribe2 plugin broken access control version ten forty-two WordPress security