CVE-2024-33595

Опубликовано: 29 апр. 2024

Источник: nvd

CVSS3: 4.3

CVSS3: 8.8

EPSS Низкий

Описание

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

Ссылки

https://patchstack.com/database/vulnerability/master-addons/wordpress-master-addons-for-elementor-plugin-2-0-5-4-1-broken-access-control-on-duplicate-post-vulnerability?_s_id=cve
Third Party Advisory
https://patchstack.com/database/vulnerability/master-addons/wordpress-master-addons-for-elementor-plugin-2-0-5-4-1-broken-access-control-on-duplicate-post-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:master-addons:master_addons:*:*:*:*:*:wordpress:*:*

Версия до 2.0.5.6 (исключая)

EPSS

Процентиль: 65%

0.00491

Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-hv3r-8m2g-v7cq

CVSS3: 4.3

github

почти 2 года назад

Missing Authorization vulnerability in Jewel Theme Master Addons for Elementor.This issue affects Master Addons for Elementor: from n/a through 2.0.5.4.1.

EPSS

Процентиль: 65%

0.00491

Низкий

4.3 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-862