PT-2024-19905 · WordPress · Ninja Tables

Emad · Published 2024-06-11 · Updated 2024-08-07 · CVE-2024-23503

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ninja Tables versions 5.0.6 and earlier

Description A Missing Authorization issue has been identified. This issue affects the Ninja Tables plugin, allowing potential unauthorized access due to the lack of proper authorization checks.

Recommendations For Ninja Tables versions 5.0.6 and earlier, update to a version later than 5.0.6 to resolve the Missing Authorization issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-23503

Affected Products

Ninja Tables

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-23503 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23503 · Vendor Advisory
• https://patchstack.com/database/vulnerability/ninja-tables/wordpress-ninja-tables-plugin-5-0-5-broken-access-control-vulnerability?_s_id=cve · Note