3 matches found
CVE-2024-39625 WordPress Icegram Engage plugin <= 3.1.24 - Unauthenticated Message Duplication Vulnerability
Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24...
5.3CVSS6.9AI score0.00359EPSS
SaveExploits0References1
CVE-2024-39625
CVE-2024-39625 affects the WordPress Icegram plugin (versions
5.3CVSS5.3AI score0.00359EPSS
SaveExploits0References1
WordPress Icegram Plugin <= 3.1.24 is vulnerable to Broken Access Control
Software Icegram Type Plugin Vulnerable versions = 3.1.24 Fixed in 3.1.25 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-39625 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 8700bcf08e02 Credits Dhabaleshwar Das Required privilege...
5.3CVSS6.3AI score0.00359EPSS
SaveExploits0References2Affected Software1
20