CVE-2024-43162

CVE-2024-43162 is a Missing Authorization vulnerability in WordPress Easy Digital Downloads (EDDs) plugin, affecting EDDs versions up to 3.2.12. The connected sources describe it as a Broken Access Control issue caused by Incorrectly Configured Access Control Security Levels that could enable an ...

CVE-2024-43208

CVE-2024-43208 describes a Missing Authorization vulnerability in the WordPress plugin Send Emails with Mandrill (Miller Media). Affected versions are 1.4.1 and earlier, with exploitability stemming from misconfigured access control. Public sources in the Connected documents explicitly identify t...

CVE-2024-43215

CVE-2024-43215 corresponds to a Missing Authorization vulnerability in Creativemotion Social Slider Feed for WordPress. Technical detail in connected PT-2024-30378 shows that versions through 2.2.2 are affected by broken access control enabling exploitation via misconfigured authorization. The re...

CVE-2024-43223

CVE-2024-43223 is a Missing Authorization vulnerability in EventPrime (WordPress plugin) affecting EventPrime versions up to 4.0.3.2. Public docs confirm susceptibility due to misconfigured access control, with several sources noting the issue and a patch/update exists (4.0.3.2+). Impact is descr...

CVE-2024-43229 WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...

CVE-2024-43229

CVE-2024-43229 is a Missing Authorization vulnerability in the WordPress plugin WP Search Analytics (versions up to and including 1.4.9). The weakness allows exploitation of misconfigured access controls to bypass authorization, as described in multiple sources. Technical details from the connect...

CVE-2024-43235 WordPress Meta Box plugin <= 5.9.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in MetaBox.Io Meta Box – WordPress Custom Fields Framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Meta Box – WordPress Custom Fields Framework: from n/a through 5.9.10...

CVE-2024-43235

CVE-2024-43235 concerns Meta Box – WordPress Custom Fields Framework. Several connected sources confirm a Missing Authorization vulnerability (broken access control) affecting the Meta Box plugin up to version 5.9.10. The CVSS 3.1 base metrics show Network attack vector, Low attack complexity, Pr...

CVE-2024-43254 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

CVE-2024-43260

CVE-2024-43260 refers to a Missing Authorization vulnerability in the WordPress plugin Clearfy Cache. Public sources indicate affected versions up to 2.2.4 and describe an incorrectly configured access control that could enable unauthorized access. The provided connected documents do not specify ...

CVE-2024-43254

CVE-2024-43254 affects the WordPress plugin Clover Online Orders (Smart Online Order for Clover). The connected docs identify a Missing Authorization issue due to misconfigured access control in Smart Online Order for Clover up to version 1.5.6. The Wordfence/CVE entries note the vulnerability as...

CVE-2024-43254 WordPress Smart Online Order for Clover plugin <= 1.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders.This issue affects Smart Online Order for Clover: from n/a through = 1.5.6...

CVE-2024-43273

CVE-2024-43273 involves Icegram Collect (WordPress plugin) with a Missing Authorization vulnerability in access control for versions up to and including 1.3.14. Public sources in connected docs identify it as a broken/incorrectly configured authorization issue that can enable unauthorized access ...

CVE-2024-43273 WordPress Icegram Collect plugin <= 1.3.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in icegram Icegram Collect plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Icegram Collect plugin: from n/a through 1.3.14...

CVE-2024-43277

CVE-2024-43277 is a Missing Authorization (Broken Access Control) issue in the UsersWP WordPress plugin (Versions up to 1.2.15). The vulnerability arises from incorrectly configured access control security levels, enabling unauthorized access as described in the CVE entry. The affected product is...

CVE-2024-43285 WordPress Presto Player plugin <= 3.0.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Presto Made, Inc Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Presto Player: from n/a through 3.0.2...

CVE-2024-43285

CVE-2024-43285 describes a Missing Authorization vulnerability in Presto Player (WordPress plugin) that affects version 3.0.2 and earlier. The issue arises from incorrectly configured access control security levels, enabling unauthorized access to restricted functions. According to the sources, C...

CVE-2024-43293

CVE-2024-43293 is a Missing Authorization vulnerability in the WPZOOM Recipe Card Blocks for Gutenberg & Elementor plugin (affected:

CVE-2024-43293 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1...

CVE-2024-43296

CVE-2024-43296: WordPress HTML5 Video Player (bPlugins Flash & HTML5 Video) has a Missing Authorization flaw affecting versions up to 2.5.30. Exploitation involves unauthorized access due to misconfigured access control, potentially exposing videos. CVSS v3.1 metrics indicate high impact to confi...