exploitDog

CVE-2024-50459

Опубликовано: 29 окт. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 9.8

EPSS Низкий

Описание

Missing Authorization vulnerability in HM Plugin WordPress Stripe Donation and Payment Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Stripe Donation and Payment Plugin: from n/a through 3.2.3.

Ссылки

https://patchstack.com/database/vulnerability/wp-stripe-donation/wordpress-aidwp-plugin-3-2-3-broken-access-control-vulnerability?_s_id=cve
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hmplugin:aidwp:*:*:*:*:*:wordpress:*:*

Версия до 3.2.4 (исключая)

EPSS

Процентиль: 67%

0.00535

Низкий

5.3 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-8wp6-p8r2-jh2m

CVSS3: 5.3

github

больше 1 года назад

Missing Authorization vulnerability in HM Plugin WordPress Stripe Donation and Payment Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Stripe Donation and Payment Plugin: from n/a through 3.2.3.

EPSS

Процентиль: 67%

0.00535

Низкий

5.3 Medium

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-862