Missing Authorization vulnerability in Bricksforge
CVE-2024-31244

7.5HIGH

Key Information:

Vendor
WordPress
Status
Bricksforge
Vendor
CVE Published:
9 June 2024

Summary

A vulnerability exists in the Bricksforge plugin for WordPress that allows attackers to exploit missing authorization mechanisms. This weakness enables unauthorized users to make arbitrary changes to WordPress settings, which can potentially lead to significant security breaches. All versions from n/a through 2.0.17 are affected, making it crucial for site administrators to implement necessary patches and updates promptly to secure their installations.

Affected Version(s)

Bricksforge <= 2.0.17

References

https://patchstack.com/database/vulnerability/bricksforge...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dave Jong (Patchstack)
.