Missing Authorization vulnerability in LeadConnector

CVE-2024-34378

What is CVE-2024-34378?

The vulnerability in LeadConnector arises from missing authorization checks, which may allow attackers to gain unauthorized access to certain functionalities of the plugin. This poses a significant risk for users by exposing sensitive operations that should be protected. The issue affects all versions of LeadConnector up to 1.7, necessitating immediate attention from users to secure their installations against potential exploitation.

References