WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability
CVE-2024-33941

5.3MEDIUM

Key Information:

Vendor: Wordpress
Status: Ipanorama 360 WordPress Virtual Tour Builder
Vendor: CVE Published:; 3 May 2024

Summary

Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1.

Affected Version(s)

iPanorama 360 WordPress Virtual Tour Builder <= 1.8.1

References

https://patchstack.com/database/vulnerability/ipanorama-3...

vdb-entry

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

None

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
May 3, 2024

Credit

Dhabaleshwar Das (Patchstack Alliance)