PT-2025-3209 · Js Morisset · Wpsso Core

Aiden + 1 · Publicado 2025-01-02 · Atualizado 2025-01-02 · CVE-2024-56243

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WPSSO Core versions n/a through 18.18.1

Description The issue is related to a Missing Authorization vulnerability in JS Morisset WPSSO Core, which allows exploiting incorrectly configured access control security levels.

Recommendations For WPSSO Core versions n/a through 18.18.1, update to a version later than 18.18.1 to resolve the issue. At the moment, there is no information about additional mitigation measures or workarounds for this specific vulnerability.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2024-56243

Produtos afetados

Wpsso Core

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-56243 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1874895749449736249 · Publicação no Twitter
• https://patchstack.com/database/wordpress/plugin/wpsso/vulnerability/wordpress-wpsso-core-plugin-18-18-1-broken-access-control-vulnerability?_s_id=cve · Nota
• https://patchstack.com/database/Wordpress/Plugin/wpsso/vulnerability/wordpress-wpsso-core-plugin-18-18-1-broken-access-control-vulnerability?_s_id=cve · Nota
• https://twitter.com/CVEnew/status/1874793957202317739 · Publicação no Twitter