CVE-2024-38748

Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9...

CVE-2024-38748 WordPress EleForms plugin <= 2.9.9.9 - Broken Access Control vulnerability

Access Control vulnerability in TheInnovs EleForms allows . This issue affects EleForms: from n/a through 2.9.9.9...

CVE-2024-38748

CVE-2024-38748 is a broken access control vulnerability in TheInnovs EleForms (WordPress plugin) affecting EleForms versions from n/a up to 2.9.9.9. The NVD entry lists this as an Access Control vulnerability with a CVSS v3.1 base score of 9.8 (CRITICAL). Other connected sources reiterate the aff...

WordPress EleForms Plugin <= 2.9.9.9 is vulnerable to Broken Access Control

Software EleForms Type Plugin Vulnerable versions = 2.9.9.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38748 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 91544cea19ce Credits Dhabaleshwar Das Required privilege...