CVE-2024-37952

CVE-2024-37952 affects the BookYourTravel WordPress theme (themeenergy) with versions up to 8.18.17. The issue is described as Improper Privilege Management enabling Privilege Escalation for authenticated users (Subscriber+). The CVSS v3.1 score is 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remed...