PT-2024-35220 · Medma Technologies · Matix Popup Builder

João Pedro S Alcântara · Published 2024-11-14 · Updated 2024-11-15 · CVE-2024-52382

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Matix Popup Builder versions 1.0.0 and earlier

Description A Missing Authorization issue in Medma Technologies Matix Popup Builder allows Privilege Escalation. This can lead to unauthorized access and elevation of privileges.

Recommendations For Matix Popup Builder versions 1.0.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-52382

Affected Products

Matix Popup Builder

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-52382 · Security Note
• https://patchstack.com/database/vulnerability/medma-matix/wordpress-matix-popup-builder-plugin-1-0-0-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/1857121835323719751 · Twitter Post
• https://twitter.com/CVEnew/status/1857119157017329985 · Twitter Post
• https://t.me/cvedetector/10985 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1857271620974334166 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/medma-matix/vulnerability/wordpress-matix-popup-builder-plugin-1-0-0-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve · Note