CVE-2024-53798 WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability

🗓️ 09 Dec 2024 12:19:56Reported by PatchstackType

Nonces are leaked leading to broken access control in WordPress FloristPress plugin versions up to 7.3.0.

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2024-53798	9 Dec 202413:15	–	nvd
Cvelist	CVE-2024-53798 WordPress FloristPress plugin <= 7.3.0 - Nonce Leakage to Broken Access Control vulnerability	9 Dec 202412:56	–	cvelist
CVE	CVE-2024-53798	9 Dec 202413:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/bakkbone-florist-companion/vulnerability/wordpress-floristpress-plugin-7-3-0-nonce-leakage-to-broken-access-control-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Dec 2024 12:56Current

7High risk

Vulners AI Score7

CVSS35.4

EPSS0.0004

SSVC

CWE-862