CVE-2024-2505

The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...

CVE-2024-2505

The GamiPress WordPress plugin before 6.8.9's access control mechanism fails to properly restrict access to its settings, permitting Authors to manipulate requests and extend access to lower privileged users, like Subscribers, despite initial settings prohibiting such access. This vulnerability...

CVE-2024-2505

The GamiPress WordPress plugin versions prior to 6.8.9 are vulnerable to a broken access control flaw. The plugin's access control mechanism fails to properly restrict access to its settings, allowing users with Author privileges to manipulate requests and extend access to lower privileged users,...

WordPress GamiPress Plugin < 6.8.9 is vulnerable to Broken Access Control

Software GamiPress Type Plugin Vulnerable versions 6.8.9 Fixed in 6.8.9 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-2505 Patch priority Low CVSS severity Low 3.8 Developer Claim ownership PSID f5678a31222a Credits cyc707 Required privilege Author...