Lucene search
WpvulndbWPVDB-ID:279679F1-F743-4B12-9E59-A4725E8EA573HistoryApr 23, 2024 - 12:00 a.m.
Mega Addons For Elementor < 1.9 - Missing Authorization
2024-04-2300:00:00
wpscan.com
4
wordpress plugin vulnerable unauthorized access
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS
0
Percentile
9.0%
Description The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.
Related
nvd
nvd
CVE-2024-32515
2024-04-17 08:15:07
cvelist
cvelist
vulnrichment
vulnrichment
cve
cve
CVE-2024-32515
2024-04-17 08:15:07
wordfence
wordfence
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS
0
Percentile
9.0%
Related for WPVDB-ID:279679F1-F743-4B12-9E59-A4725E8EA573