CVE-2024-43214

Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through = 2.7.2...

CVE-2024-43214

CVE-2024-43214 concerns a Missing Authorization vulnerability in the WordPress plugin myCred . Public records indicate the issue affects myCred versions up to 2.7.2 (n/a through 2.7.2) and is described as an information exposure/missing authorization problem that could potentially expose data. Th...

WordPress myCred Plugin <= 2.7.2 is vulnerable to Broken Access Control

Software myCred Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43214 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID fb17e972c338 Credits Mika Required privilege Unauthenticate...