PT-2025-2915 · Unknown · Homey Login Register

Luc · Published 2025-01-21 · Updated 2025-01-21 · CVE-2024-51888

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The issue affects Homey Login Register, with versions from n/a through 2.4.0, due to an Incorrect Privilege Assignment, allowing Privilege Escalation. An exploit for this issue is available, but details on how it is exploited are not provided here to avoid duplication. The affected software is Homey Login Register, with versions from n/a through 2.4.0 being impacted. #HomeyLoginRegister #PrivilegeEscalation #cybersecurity #NotFound #PrivilegeAssignment

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2024-51888

Affected Products

Homey Login Register

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-51888 · Security Note
• https://twitter.com/CVEnew/status/1881700923367444534 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/homey-login-register/vulnerability/wordpress-homey-login-register-plugin-2-4-0-privilege-escalation-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/homey-login-register/vulnerability/wordpress-homey-login-register-plugin-2-4-0-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/108005 · Telegram Post
• https://twitter.com/CveFindCom/status/1881704572500005130 · Twitter Post