CVE-2024-2231

The WordPress theme Himer is vulnerable in versions prior to 2.1.1 due to a missing authorization check on a specific function. This flaw allows any authenticated user to join a private group via an IDOR (Insecure Direct Object Reference) vulnerability. While the impact allows unauthorized access...