CVE-2024-34438

CVE-2024-34438 is a Missing Authorization vulnerability in the WordPress plugin Shared Files (Download Manager & Media Gallery) affecting versions up to and including 1.7.19 . The issue enables unauthorized access to protected resources due to broken access control. The CVSS v3.1 base score is 5....

CVE-2024-34438

creationtimestamp| type| source ---|---|--- 2025-02-19 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqchlw2b 2025-02-27 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lj6s24wx4c23...

WordPress Shared Files Plugin <= 1.7.19 is vulnerable to Broken Access Control

Software Shared Files Type Plugin Vulnerable versions = 1.7.19 Fixed in 1.7.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-34438 Patch priority Low CVSS severity Low 5.3 Developer Tammersoft PSID 04ad9b91bcca Credits domiee13 Required privilege...