Missing Authorization Vulnerability Affects Team WP2LEADS
CVE-2024-31375

5.4MEDIUM

Key Information:

Vendor: WordPress
Status: WP2leads
Vendor: CVE Published:; 8 April 2024

What is CVE-2024-31375?

Missing Authorization vulnerability in Saleswonder.Biz Team WP2LEADS.This issue affects WP2LEADS: from n/a through 3.2.7.

Affected Version(s)

WP2LEADS <= 3.2.7

References

https://patchstack.com/database/vulnerability/wp2leads/wo...

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 8, 2024
Vulnerability Reserved
Apr 1, 2024

Credit

Dhabaleshwar Das (Patchstack Alliance)

.