CVE-2024-31244

CVE-2024-31244 corresponds to a Bricksforge WordPress plugin issue with Missing Authorization in versions n/a–2.0.17. Connected sources describe unauthenticated actions including arbitrary email sending, WordPress settings deletion/update, and other unauthorized settings changes. Affected plugin ...

CVE-2024-31244 WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

CVE-2024-31243

CVE-2024-31243 refers to Bricksforge (WordPress plugin) with a Missing Authorization vulnerability affecting Bricksforge versions up to 2.0.17. Connected docs corroborate related Bricksforge issues (CVE-2024-31242/31244) describing unauthenticated access enabling actions on WordPress settings (de...

CVE-2024-31243 WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

CVE-2024-31243 WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

WordPress plugin Bricksforge security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-23885 · Unknown · Bricksforge

Name of the Vulnerable Software and Affected Versions: Bricksforge versions from n/a through 2.0.17 Description: The issue is related to a Missing Authorization vulnerability in Bricksforge. This vulnerability could potentially impact systems using the affected versions. Recommendations: For...

WordPress plugin Bricksforge security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-23886 · Unknown · Bricksforge

Name of the Vulnerable Software and Affected Versions: Bricksforge versions n/a through 2.0.17 Description: The issue is related to a Missing Authorization vulnerability in Bricksforge. This vulnerability affects Bricksforge versions from n/a through 2.0.17. Recommendations: For versions n/a...

Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated Arbitrary Email Sending

Description The Bricksforge plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the a function in versions up to, and including, 2.0.17. This makes it possible for unauthenticated attackers to send arbitrary emails...

Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Update

Description The Bricksforge plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.0.17. This makes it possible for unauthenticated attackers to update arbitrary WordPress settings...

CVE-2024-31242

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

CVE-2024-31242 WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary Email Sending vulnerability

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

CVE-2024-31242

Bricksforge is affected by CVE-2024-31242: Missing Authorization allows unauthenticated email sending in Bricksforge plugin versions up to and including 2.0.17. The CVSS 3.1 score is 5.3 (Network access, low confidentiality/ integrity impact, no availability impact; no user interaction required)....

CVE-2024-31242 WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary Email Sending vulnerability

Missing Authorization vulnerability in Bricksforge.This issue affects Bricksforge: from n/a through 2.0.17...

PT-2024-23884 · Unknown · Bricksforge

Name of the Vulnerable Software and Affected Versions: Bricksforge versions 2.0.17 and earlier Description: A Missing Authorization issue has been identified. This issue affects the authorization mechanism, potentially allowing unauthorized access. Recommendations: For versions 2.0.17 and earlier...

WordPress Plugin Bricksforge 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers running PHP and MySQL.WordPress...

WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Settings Change vulnerability

Unauthenticated Arbitrary WordPress Settings Change vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Bricksforge versions = 2.0.17...

WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary WordPress Setting Deletion vulnerability

Unauthenticated Arbitrary WordPress Setting Deletion vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Bricksforge versions = 2.0.17...

WordPress Bricksforge plugin <= 2.0.17 - Unauthenticated Arbitrary Email Sending vulnerability

Unauthenticated Arbitrary Email Sending vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Bricksforge versions = 2.0.17...