CVE-2024-24718

Missing Authorization vulnerability in PropertyHive.This issue affects PropertyHive: from n/a through 2.0.6...

CVE-2024-24718

CVE-2024-24718: PropertyHive WordPress plugin had a Missing Authorization flaw (unauthenticated) allowing activation of pro features via activate_pro_feature() without proper capability checks

WordPress PropertyHive Plugin <= 2.0.6 is vulnerable to Broken Access Control

Software PropertyHive Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.7 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-24718 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4eea0b5c54d4 Credits Yudistira Arya Required privileg...