Authentication Bypass by Spoofing Vulnerability Affects Wpmet

CVE-2024-21746

What is CVE-2024-21746?

The Wp Ultimate Review plugin developed by Wpmet is susceptible to an authentication bypass by spoofing, allowing unauthorized users to access functionalities without proper authentication. This vulnerability impacts versions from n/a to 2.3.2, posing significant risks to the integrity and security of user data and review submissions. It is crucial for users of the affected versions to apply timely patches and updates to safeguard their systems against this exploit.

References