WordPress JoomSport plugin <= 5.3.0 - Broken Access Control vulnerability

CVE-2024-43355

Summary

A vulnerability exists in the BearDev JoomSport plugin that stems from missing authorization checks, leading to potential exploitation through incorrectly configured access control levels. This issue allows unauthorized users to bypass restrictions and perform actions that should be reserved for authenticated roles. The vulnerability affects all versions of JoomSport from n/a up to and including 5.3.0, which could result in severe implications for sites using this plugin. It is crucial for users to assess their configurations and implement necessary safeguards.

References