CVE-2024-43154

CVE-2024-43154 is a Missing Authorization (broken access control) vulnerability in BracketSpace Advanced Cron Manager for WordPress, affecting debug & control up to version 2.5.9. Public sources indicate this plugin allows unauthorized access due to misconfigured access controls. Remediation from...

CVE-2024-43215

CVE-2024-43215 corresponds to a Missing Authorization vulnerability in Creativemotion Social Slider Feed for WordPress. Technical detail in connected PT-2024-30378 shows that versions through 2.2.2 are affected by broken access control enabling exploitation via misconfigured authorization. The re...

CVE-2024-43223

CVE-2024-43223 is a Missing Authorization vulnerability in EventPrime (WordPress plugin) affecting EventPrime versions up to 4.0.3.2. Public docs confirm susceptibility due to misconfigured access control, with several sources noting the issue and a patch/update exists (4.0.3.2+). Impact is descr...

CVE-2024-43229 WordPress WP Search Analytics plugin <= 1.4.9 - Broken Access Control vulnerability

Missing Authorization vulnerability in Cornel Raiu WP Search Analytics search-analytics.This issue affects WP Search Analytics: from n/a through = 1.4.9...

CVE-2024-43273

CVE-2024-43273 involves Icegram Collect (WordPress plugin) with a Missing Authorization vulnerability in access control for versions up to and including 1.3.14. Public sources in connected docs identify it as a broken/incorrectly configured authorization issue that can enable unauthorized access ...

CVE-2024-43293

CVE-2024-43293 is a Missing Authorization vulnerability in the WPZOOM Recipe Card Blocks for Gutenberg & Elementor plugin (affected:

CVE-2024-43298 WordPress Clone plugin <= 2.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5...

CVE-2024-43314

CVE-2024-43314 affects WordPress Asset CleanUp: Page Speed Booster (versions up to 1.3.9.3). Root cause: Missing/Incorrectly configured access control (Missing Authorization) enabling unauthorized access to assets. Impact: High (as per NVD CVSS 3.1 base score 8.8, high confidentiality, integrity,...

CVE-2024-43932

CVE-2024-43932 is a Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite. The issue arises from incorrectly configured access control security levels, allowing unauthorized actions. Affected: The Plus Addons for Elementor Page Builder Lite up to version ...

CVE-2024-43937 WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10...

CVE-2024-47361

CVE-2024-47361 – Elementor Addon Elements (WPVibes)

CVE-2024-47362

CVE-2024-47362 is a Broken Access Control vulnerability in WordPress plugin Strong Testimonials (versions

PT-2024-30305 · Wpmu Dev · Wpmu Dev Hummingbird

Name of the Vulnerable Software and Affected Versions: WPMU DEV Hummingbird versions 3.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For WPMU DEV Hummingbi...

CVE-2024-50419

Incorrect Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift: from n/a through = 9.7...

CVE-2024-50421

Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-packing-slips allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce PDF Invoices & Packing Slips: from n/a through = 3.8.6...

CVE-2024-50456

CVE-2024-50456 affects the SEOPress WordPress plugin up to version 8.1.1, with Missing/Broken Access Control due to incorrectly configured authorization. Connected sources confirm the root cause as a broken access control vulnerability and note fixed in 8.2. Exploitation status is not detailed in...

CVE-2024-49657 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49657 WordPress 3D Work In Progress plugin <= 1.0.3 - Arbitrary File Deletion vulnerability

Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 3D Work In Progress: from n/a through = 1.0.3...

CVE-2024-49321

Missing Authorization vulnerability in colorlibplugins Simple Custom Post Order simple-custom-post-order allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Custom Post Order: from n/a through = 2.5.7...

CVE-2024-5619 IDOR in PruvaSoft Informatics' Apinizer Management Console

Authorization Bypass Through User-Controlled Key vulnerability in PruvaSoft Informatics Apinizer Management Console allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Apinizer Management Console: before 2024.05.1...