Lucene search

CVE-2024-7894 If Menu <= 0.19.1 - Missing Authorization to License Key Update

🗓️ 07 Dec 2024 01:53:45Reported by WordfenceType

CVE-2024-7894 allows unauthorized license key modification in If Menu plugin for WordPress.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-7894 If Menu <= 0.19.1 - Missing Authorization to License Key Update	7 Dec 202401:45	–	cvelist
NVD	CVE-2024-7894	7 Dec 202402:15	–	nvd
CVE	CVE-2024-7894	7 Dec 202402:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 2, 2024 to December 8, 2024)	12 Dec 202415:38	–	wordfence

[
  {
    "cpes": [
      "cpe:2.3:a:andreiigna:if_menu:*:*:*:*:*:*:*:*"
    ],
    "vendor": "andreiigna",
    "product": "if_menu",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "0.19.1"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/if-menu/trunk/src/Admin.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ff6ebf45-4617-44dd-94d8-28aa8bc1609b

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

07 Dec 2024 01:45Current

7High risk

Vulners AI Score7

CVSS35.3

EPSS0.001

SSVC

CWE-862