CVE-2024-37255 WordPress ElementsKit Lite plugin <= 3.1.4 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in Wpmet Elements kit Elementor addons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elements kit Elementor addons: from n/a through 3.1.4...

CVE-2024-37255

CVE-2024-37255 corresponds to a Missing Authorization vulnerability in Wpmet Elements Kit Elementor addons (ElementsKit Lite)

CVE-2024-37277

CVE-2024-37277 is an Authorization Bypass via a user-controlled key affecting Paid Memberships Pro

CVE-2024-37277 WordPress Paid Memberships Pro plugin <= 3.0.4 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Paid Memberships Pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Paid Memberships Pro: from n/a through 3.0.4...

CVE-2024-37463

CVE-2024-37463 is a Missing Authorization vulnerability in the WordPress plugin CRM Perks Forms (affected: 1.1.5 and earlier). The CVE description and related sources confirm this is a Broken Access Control issue where functionality is not properly constrained by ACLs, allowing unauthenticated ac...

CVE-2024-37470 WordPress Woffice Core plugin <= 5.4.8 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in WofficeIO Woffice Core allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Woffice Core: from n/a through 5.4.8...

CVE-2024-37475 WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2...

CVE-2024-37510

CVE-2024-37510 concerns WordPress plugin Charitable (Donation Forms by Charitable – Donations Plugin & Fundraising Platform for WordPress) with versions up to 1.8.1.7. The root cause is a missing authorization check that allows users to access functionality not constrained by ACLs. The vulnerabil...

CVE-2024-37506

CVE-2024-37506 is a Missing Authorization vulnerability affecting WordPress plugin Charitable (Donation Forms by Charitable) up to version 1.8.1.7. The issue arises from access control that does not properly constrain certain functionality, enabling access to features not protected by ACLs. Publi...

CVE-2024-38702 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tyche Softwares Product Delivery Date for WooCommerce – Lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Delivery Date for WooCommerce – Lite: from n/a through 2.7.2...

CVE-2024-38702

CVE-2024-38702 relates to Tyche Software’s Product Delivery Date for WooCommerce – Lite, describing a Missing Authorization vulnerability that allows accessing functionality not properly constrained by ACLs. Affected versions are Lite up to 2.7.2 (inclusive); remediation is to upgrade to a versio...

CVE-2024-38726

The CVE-2024-38726 entry concerns WordPress Product Designer plugin versions prior to or equal to 1.0.33, with a Missing Authorization vulnerability that allows Access to functionality not properly constrained by ACLs. The issue affects PickPlugins Product Designer and is documented as an Arbitra...

CVE-2024-38737 WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.0422...

CVE-2024-38737

Technical details about CVE-2024-38737 are not present in the provided connected documents. Public information in these sources does not specify affected versions, root cause, impact, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2024-38744 WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability

Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a through 2.0...

CVE-2024-38745

CVE-2024-38745 describes a missing authorization vulnerability in Rymera Web Co Wholesale Suite (versions ≤ 2.1.12). The root cause is that certain functionality is not properly constrained by ACLs, enabling access to features or data without proper permissions. Impact per source: unauthorized ac...

CVE-2024-38769

CVE-2024-38769 : WordPress plugin Arconix Shortcodes versions = 2.1.12. If upgrading is not feasible, apply vendor guidance and monitor for advisories; no additional mitigations are specified in the provided documents.

CVE-2024-38769 WordPress Arconix Shortcodes plugin <= 2.1.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in Tyche Softwares Arconix Shortcodes allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Arconix Shortcodes: from n/a through 2.1.11...

CVE-2024-38771 WordPress Atarim plugin <= 4.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through = 4.0...

CVE-2024-38792 WordPress ConveyThis Translate plugin <= 234 - Non-arbitrary Options Update vulnerability

Missing Authorization vulnerability in ConveyThis Translate Team Language Translate Widget for WordPress – ConveyThis allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Language Translate Widget for WordPress – ConveyThis: from n/a through 234...