PT-2024-32551 · WordPress · Stuart Wilson Joy Of Text Lite

Guru Raghav Saravanan · CVE-2024-47337 · Published 2024-09-26 · Updated 2024-09-26

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Stuart Wilson Joy Of Text Lite versions 2.3.1 and earlier

Description A Missing Authorization issue is present in Stuart Wilson Joy Of Text Lite, allowing for unauthorized access. This issue impacts the plugin up to version 2.3.1 on WordPress.

Recommendations For versions 2.3.1 and earlier, update the plugin to the latest patched version immediately to prevent unauthorized access.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-47337

Affected Products

Stuart Wilson Joy Of Text Lite

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-47337 · Security Note
• https://twitter.com/VulmonFeeds/status/1839251946185642421 · Twitter Post
• https://t.me/cvedetector/6396 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/joy-of-text/vulnerability/wordpress-joy-of-text-lite-plugin-2-3-1-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/96098 · Telegram Post
• https://twitter.com/oktsec/status/1839253005771620776 · Twitter Post
• https://twitter.com/CVEnew/status/1839226926759592242 · Twitter Post
• https://patchstack.com/database/vulnerability/joy-of-text/wordpress-joy-of-text-lite-plugin-2-3-1-broken-access-control-vulnerability?_s_id=cve · Note