CVE-2024-37477

CVE-2024-37477: WordPress plugin Newspack Content Converter (versions up to and including 0.1.5) contains a Missing Authorization (broken access control) vulnerability due to incorrectly configured access controls. The issue allows exploitation without sufficient privileges and is documented acro...

CVE-2024-37477 WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Content Converter: from n/a through 0.1.5...

CVE-2024-37482

CVE-2024-37482 corresponds to a Missing Authorization (broken access control) vulnerability in The Post Grid (WordPress plugin by RadiusTheme). The Post Grid allows exploitation of misconfigured access control levels, affecting The Post Grid versions from n/a up to 7.7.4. Public disclosures and t...

CVE-2024-37483

CVE-2024-37483 describes a Missing Authorization vulnerability in the WordPress plugin The Post Grid by RadiusTheme. The issue affects The Post Grid versions up to and including 7.7.4 and involves exploitable access control misconfigurations that permit bypassing authorization checks due to Incor...

CVE-2024-37505 WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability

Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9...

CVE-2024-37505

CVE-2024-37505 concerns the WordPress theme Business One Page (Rara Themes) with versions up to 1.2.9. The vulnerability is described as a Missing Authorization/Incorrect Access Control flaw that enables exploitation related to the notice dismissal flow (Missing Authorization to Notice Dismissal)...

CVE-2024-37516

CVE-2024-37516 concerns a Missing Authorization vulnerability in the WordPress plugin “Featured Image from URL” (FIFU). The issue affects FIFU versions up to 4.8.2 (and earlier as noted in multiple sources). The root cause is incorrectly configured access control, enabling an attacker to exploit ...

CVE-2024-37516 WordPress Featured Image from URL (FIFU) plugin <= 4.8.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.2...

CVE-2024-37921

CVE-2024-37921 corresponds to a WordPress plugin vulnerability in Chained Quiz (WordPress Plugin) versions up to 1.3.2.8, described as a Missing Authorization / Broken Access Control issue. The root cause is incorrectly configured access control security levels, enabling unauthenticated users to ...

CVE-2024-37517

CVE-2024-37517 is a Missing Authorization vulnerability in Spectra (WordPress Gutenberg Blocks by Ultimate Addons for Gutenberg) affecting Spectra up to version 2.13.7. The issue enables unauthorized actions due to misconfigured access controls (Missing Authorization to generate_ai_content). Publ...

CVE-2024-37929

The solwin User Activity Log Pro WordPress plugin (versions through 2.3.4 ) is affected by a Missing Authorization vulnerability. This flaw allows for the exploitation of incorrectly configured access control security levels , specifically identified as a Subscriber+ Multiple Broken Access Contro...

CVE-2024-38695 WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6...

CVE-2024-38695

CVE-2024-38695 documents a Missing Authorization vulnerability in the WordPress plugin WP GoToWebinar . The issue is described as an access-control misconfiguration affecting WP GoToWebinar versions up to and including 15.6, enabling exploitation due to incorrectly configured security levels. The...

CVE-2024-38695 WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6...

CVE-2024-38707 WordPress EmbedPress plugin <= 4.0.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPDeveloper EmbedPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EmbedPress: from n/a through 4.0.4...

CVE-2024-38707

CVE-2024-38707 corresponds to a Missing Authorization vulnerability in WPDeveloper EmbedPress for WordPress. The issue arises from broken access control that could allow unauthorized access to restricted operations in EmbedPress versions up to 4.0.4. CVSS v3.1 data from the provided sources indic...

CVE-2024-38719

CVE-2024-38719 is a real, publicly documented vulnerability affecting the WordPress plugin Creative Motion Auto Featured Image (Auto Post Thumbnail) up to version 4.1.2 . The root cause is a Missing/Incorrectly Configured Authorization that allows exploitation of access control weaknesses in the ...

CVE-2024-38714

CVE-2024-38714 concerns WP Fast Total Search (Epsiloncool) with Missing Authorization due to incorrectly configured access control levels. Affected versions are WP Fast Total Search 1.68.232 and earlier. Public details in connected sources indicate the attack surface involves unauthorized access ...

CVE-2024-38721

CVE-2024-38721 is a Missing Authorization vulnerability in the WordPress plugin EazyDocs by spider-themes. Multiple connected sources corroborate that it concerns broken access control allowing unauthorized access due to misconfigured security levels, affecting EazyDocs versions up to 2.5.0. The ...

CVE-2024-38727

CVE-2024-38727 is a Missing Authorization (broken access control) vulnerability affecting the Seraphinite Post .DOCX Source WordPress plugin. The public record indicates the issue exists in Seraphinite Post .DOCX Source versions from unknown/n/a through 2.16.9 and does not provide product-specifi...