Authorization Flaw in Fatcat Apps Landing Page Cat
CVE-2024-49686

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Landing Page Cat
Vendor
CVE Published:
31 December 2024

What is CVE-2024-49686?

A missing authorization flaw has been identified in Fatcat Apps' Landing Page Cat plugin. This vulnerability allows unauthorized users to gain access to certain functions and data, potentially compromising the security of the affected WordPress sites. Version 1.7.4 and earlier are specifically impacted, raising concerns about user permissions and data integrity. Prompt action is recommended to mitigate risks associated with this vulnerability.

Affected Version(s)

Landing Page Cat <= 1.7.4

References

https://patchstack.com/database/wordpress/plugin/landing-...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Savphill (Patchstack Alliance)
.