CVE-2024-8290

🗓️ 04 Feb 2025 22:43:40Reported by redhat.comType

Vulnerability in WCFM Frontend Manager allows attackers to change admin email and reset passwords.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-8290	25 Sep 202410:08	–	circl
CNNVD	WordPress plugin WCFM 安全漏洞	25 Sep 202400:00	–	cnnvd
CVE	CVE-2024-8290	25 Sep 202406:49	–	cve
Cvelist	CVE-2024-8290 WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation	25 Sep 202406:49	–	cvelist
EUVD	EUVD-2024-49071	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8290	25 Sep 202407:15	–	nvd
Patchstack	WordPress WCFM – Frontend Manager for WooCommerce Plugin <= 6.7.12 is vulnerable to Privilege Escalation	25 Sep 202400:00	–	patchstack
Patchstack	WordPress WCFM – Frontend Manager for WooCommerce plugin <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation vulnerability	25 Sep 202401:31	–	patchstack
Positive Technologies	PT-2024-38918 · WordPress +1 · Bookings Subscription Listings Compatible +1	24 Sep 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-8290 WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible <= 6.7.12 - Insecure Direct Object Reference to Account Takeover/Privilege Escalation	25 Sep 202406:49	–	vulnrichment

Source	Link
cve	www.cve.org/CVERecord